PT-2026-53206 · Gotohttp · Gotohttp

Songmaoyang · Published 2026-06-29 · Updated 2026-06-29 · CVE-2026-13536

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions GotoHTTP versions prior to 10.3

Description Remote attackers can initiate cross site scripting by manipulating the sn argument during the processing of the /reg.12x file. Cross site scripting is a technique where malicious scripts are injected into trusted websites.

Recommendations Update to version 10.3 or later. As a temporary mitigation, restrict access to the /reg.12x file.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-13536

Affected Products

Gotohttp

References · 7

• 🔥 https://github.com/Qq1111111111/CVE/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-13536 · Security Note
• https://twitter.com/VulmonFeeds/status/2071487348123017658 · Twitter Post
• https://vuldb.com/vuln/374544 · Note
• https://vuldb.com/vuln/374544/cti · Note
• https://vuldb.com/cve/CVE-2026-13536 · Note
• https://vuldb.com/submit/842066 · Note