PT-2026-28394 · Timo · Timo

Xfgvgfg · Publicado 2026-03-26 · Atualizado 2026-03-29 · CVE-2026-30162

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Timo version 2.0.3

Description A Cross Site Scripting (XSS) issue exists in Timo version 2.0.3. The issue is triggered by manipulated links within the title field. Exploitation involves crafting malicious links that, when clicked, can execute arbitrary scripts in the context of the affected application. The vulnerable parameter is the title field.

Recommendations Update to a newer version of Timo that addresses this issue. As a temporary workaround, sanitize all input received for the title field to remove or encode potentially malicious characters.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-30162

Produtos afetados

Timo

Referências · 3

• https://github.com/auntvt/Timo/issues/10 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2038135243220398490 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-30162 · Nota de Segurança