PT-2026-21571 · Xingfuggz · Baykeshop

Jeremy2214 · Published 2026-02-23 · Updated 2026-02-24 · CVE-2026-3041

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions xingfuggz BaykeShop versions up to 1.3.20

Description A security issue exists in xingfuggz BaykeShop, specifically within the Article Sidebar Module. Manipulation of the sidebar.content argument in the file src/baykeshop/contrib/article/templates/baykeshop/sidebar/custom.html can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed.

Recommendations Versions prior to 1.3.20 should be updated. As a temporary workaround, consider restricting or disabling the Article Sidebar Module until a fix is available.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-3041

Affected Products

Baykeshop

References · 10

• 🔥 https://github.com/xingfuggz/baykeShop/issues/1#issue-3931488211 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-3041 · Security Note
• https://github.com/xingfuggz/baykeShop/issues/1 · Note
• https://t.me/CVEtracker/45534 · Telegram Post
• https://vuldb.com/?id.347397 · Note
• https://vuldb.com/?submit.757165 · Note
• https://twitter.com/CVEnew/status/2026184676864667732 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2026094972634624294 · Twitter Post
• https://github.com/xingfuggz/baykeShop · Note
• https://vuldb.com/?ctiid.347397 · Note