VULNERABILITY INTELLIGENCE
CVE-2026-54221
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-06-18
Last modified2026-10-26
Description
UBB.threads is vulnerable to Reflected XSS. The application improperly handles user input in certain requests, enabling attackers to execute arbitrary JavaScript in the context of a victim's browser by tricking them into clicking a crafted link. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 7.7.5 but may also affect other versions.
Weakness classification
- cvd@cert.pl: CWE-79