Is CVE-2026-90563 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-90563?

CVE-2026-90563 has a CVSS v3 severity of LOW (3.5).

Back

CVE-2026-90563

Description

A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely.