XSS in Ubb Systems Ubb.threads

CVE-2026-54221

UBB.threads is vulnerable to Reflected XSS. The application improperly handles user input in certain requests, enabling attackers to execute arbitrary JavaScript in the context of a victim's browser by tricking them into clicking a crafted…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (21.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References