PT-2026-29449 · Welovemedia · Ffmate

Vuldb · Published 2026-04-01 · Updated 2026-04-01 · CVE-2026-5254

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions welovemedia FFmate versions up to 2.0.15

Description A security issue exists in welovemedia FFmate up to version 2.0.15 related to cross site scripting. The issue is located in the file /ui/app/components/AppJsonTreeView.vue within the Webhook Handler component. The manipulation of some unknown functionality leads to cross site scripting and can be initiated remotely. The exploit has been publicly disclosed.

Recommendations Update to a version later than 2.0.15.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-5254

Affected Products

Ffmate

References · 6

• 🔥 https://github.com/CC-T-454455/Vulnerabilities/tree/master/ffmate/vulnerability-2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5254 · Security Note
• https://vuldb.com/vuln/354444 · Note
• https://twitter.com/CVEnew/status/2039279678763278649 · Twitter Post
• https://vuldb.com/submit/780615 · Note
• https://vuldb.com/vuln/354444/cti · Note