CVE-2026-76563

MediumCVSS 6.1

Published: 05/11/2026(UTC)Updated: 05/11/2026(UTC)Translated: 05/11/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

Improper neutralization of script-related HTML tags in a web page (basic XSS) vulnerability in Fileorbis Informatics Services Trade Inc. Fileorbis allows using malicious files. This issue affects Fileorbis before 12.5.4.

Risk Assessment

An attacker could inject malicious script code that executes in the user's browser. This may lead to session data theft or unauthorized actions.

Recommendation

Update Fileorbis to version 12.5.4 or later. Implement input validation and escaping to mitigate XSS risk.

Other vulnerabilities in Fileorbis

CVE-2026-19447Medium
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS. This issue affects FileOrbis: before 16.5.

Original NVD description (English source)

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Fileorbis Informatics Services Trade Inc. Fileorbis allows Using Malicious Files. This issue affects Fileorbis: before 12.5.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS