What’s Vulnerable › Products

jtsternberg CMB2 vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your jtsternberg CMB2 version is affected

Latest jtsternberg CMB2 vulnerabilities

• CVE-2026-116761 — CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Form (CVSS 5.4)
• CVE-2026-97336 — CMB2 <= 2.13.0 - Unauthenticated Stored Cross-Site Scripting via 'file_list' Field Type (CVSS 7.2)
• CVE-2026-102772 — CMB2 <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'textarea_code' Field (CVSS 7.2)