What’s Vulnerable › Vulnerabilities

CVE-2026-90563: maliangnansheng bbs-springboot ArticleController.java utils.toToc cross site scripting

• Severity: low (CVSS 3.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-13 · updated 2026-09-16
• Weakness: CWE-79

Description

A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely.

Affected products

• maliangnansheng bbs-springboot: 3.0.0

References

• https://github.com/maliangnansheng/bbs-springboot/
• https://github.com/maliangnansheng/bbs-springboot/issues/38
• https://github.com/maliangnansheng/bbs-vue3-ui/pull/2
• https://vuldb.com/cve/CVE-2026-90563
• https://vuldb.com/submit/912549
• https://vuldb.com/vuln/403148
• https://vuldb.com/vuln/403148/cti

Get alerted when CVE-2026-90563 or the next vulnerability affects your stack