CVE-2026-14704mediumCWE-79CWE-94

CVE-2026-14704: medium-severity vulnerability in stephen-kruger bluebox

stephen-kruger bluebox cross site scripting

Published · Updated

Follow this CVE+ Monitor bluebox

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 5.3epss 0.5%
A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
stephen-kruger · bluebox
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.