VULNERABILITY INTELLIGENCE

CVE-2026-27787

CVSS score5.4 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-04-08
Last modified2026-07-25
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

Cross-site scripting vulnerability exists in MATCHA SNS 1.3.9 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product.

Weakness classification

  • vultures@jpcert.or.jp: CWE-79

Primary references