CVE-2026-90563 in bbs-springboot

Prediction

by VulDB Data Team • 09/12/2026

A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely.

Once again VulDB remains the best source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-403148
• CPE: ready
• CWE: CWE-79 (confirmed)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-90563
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-90563
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-90563/