anonhaven

CVE-2026-102292

MEDIUM CVSS 4.0: 2.1 EPSS 0.28%
Updated Sep 29, 2026
Coolbeans1212
Parameter Value
CVSS 2.1 (MEDIUM)
Type CWE-94 (Code Injection), CWE-79 (Cross-Site Scripting (XSS))
Vendor Coolbeans1212
Public PoC No

A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea2a4226deeca27ab1fb9df0552ec76444547811. Affected by this issue is some unknown functionality of the file users.php. This manipulation of the argument Search causes cross site scripting.

The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product.

Therefore, no version details of affected nor updated releases are available. Patch name: 6406308df9771d2fd477b56dafe4878dd846df6e. Applying a patch is the recommended action to fix this issue.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
Passive
Minimal interaction

Impact Assessment

Confidentiality
None
No data leak
Integrity
Low
Partial data modification
Availability
None
No disruption

CVSS Vector v4.0

Weakness Type (CWE)

CWE-94 Code Injection
CWE-79 Cross-Site Scripting (XSS)

Vulnerable Products

coolbeans1212:mateishomepage-website

References 7

https://vuldb.com/vuln/411182
VDB-411182 | coolbeans1212 MateisHomePage-Website users.php cross site scripting
https://vuldb.com/vuln/411182/cti
VDB-411182 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/cve/CVE-2026-102292
CVE-2026-102292 | CVE Analysis and Report
https://vuldb.com/submit/940461
Submit #940461 | GitHub MateisHomePage-Website 1.0 Cross Site Scripting
https://github.com/coolbeans1212/MateisHomePage-Website/issues/8
NVD
https://github.com/coolbeans1212/MateisHomePage-Website/commit/6406308df9771d2f…
NVD
https://github.com/coolbeans1212/MateisHomePage-Website/
NVD
Share Post Share Share Share