CVE Catalog
CVE-2026-28179
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk0.17%
7th percentile - higher than 7% of all known CVEs
Summary
Cross Site Scripting (XSS) vulnerability in FiboSearch versions up to 1.33.0 allows a Shop manager user to inject malicious script.
Risk Assessment
Malicious script can be executed in other users' browsers, potentially leading to session theft or account takeover.
Recommendation
Update the FiboSearch plugin to the latest version that includes the security fix.
Other vulnerabilities in FiboSearch
Original NVD description (English source)
Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions.