PT-2026-28394 · Timo · Timo

Xfgvgfg · Published 2026-03-26 · Updated 2026-03-29 · CVE-2026-30162

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Timo version 2.0.3

Description A Cross Site Scripting (XSS) issue exists in Timo version 2.0.3. The issue is triggered by manipulated links within the title field. Exploitation involves crafting malicious links that, when clicked, can execute arbitrary scripts in the context of the affected application. The vulnerable parameter is the title field.

Recommendations Update to a newer version of Timo that addresses this issue. As a temporary workaround, sanitize all input received for the title field to remove or encode potentially malicious characters.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-30162

Affected Products

Timo

References · 3

• https://github.com/auntvt/Timo/issues/10 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-30162 · Security Note
• https://twitter.com/CVEnew/status/2038135243220398490 · Twitter Post