PT-2026-21299 · Unknown · Photobooth

Norfrt6-Lab · Publicado 2026-02-20 · Atualizado 2026-02-20 · CVE-2026-27020

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions Photobooth versions prior to 1.0.1

Description The software contains a cross-site scripting (XSS) issue stemming from unvalidated form inputs. This allows malicious users to inject scripts. The issue affects user input fields within the application.

Recommendations Update to version 1.0.1 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-27020

Produtos afetados

Photobooth

Referências · 3

• https://twitter.com/CVEnew/status/2024988755833356776 · Publicação no Twitter
• https://github.com/lukas12000/photobooth/security/advisories/GHSA-x2m3-43gg-rrgq · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-27020 · Nota de Segurança