Security Advisory

CVE-2026-4494

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-20 17:32:49
Last updated 2026-03-24 19:31:55
Assigner VulDB
State PUBLISHED

Description

A vulnerability was identified in atjiu pybbs 6.0.0. This affects the function create of the file src/main/java/co/yiiu/pybbs/controller/api/TopicApiController.java. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.