PT-2026-50668 · Unknown · Ubb.Threads

Kamil Szczurowski + 1 · CVE-2026-54219 · Published 2026-06-18 · Updated 2026-06-18

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions UBB.threads version 7.7.5

Description Stored Cross-Site Scripting occurs because the application fails to properly sanitize user input in user posts and user profile fields. This allows low privileged attackers to inject arbitrary JavaScript that executes in a victim's browser when the content is viewed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-54219

Affected Products

Ubb.Threads

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-54219 · Security Note
• https://t.me/cveNotify/170609 · Telegram Post
• https://t.me/cveNotify/170610 · Telegram Post
• https://t.me/cveNotify/170608 · Telegram Post
• https://t.me/cveNotify/170607 · Telegram Post
• https://cert.pl/en/posts/2026/06/CVE-2026-54219 · Note
• https://t.me/cveNotify/170611 · Telegram Post
• https://ubbcentral.com · Note
• https://t.me/CVEtracker/57252 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2067650458848494054 · Twitter Post