Cross-Site Scripting Vulnerability in coolbeans1212 MateisHomePage-Website
CVE-2026-102292

5.3MEDIUM

Key Information:

Vendor

Coolbeans1212

Status
Mateishomepage-website
Vendor
CVE Published:
29 September 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-102292?

A vulnerability exists in the coolbeans1212 MateisHomePage-Website that allows for cross-site scripting (XSS) through inadequate handling of input in the users.php file. Malicious actors can exploit this flaw remotely, allowing them to execute arbitrary scripts in the context of a victim's browser session. To mitigate this security risk, it is advised to apply the provided patch (6406308df9771d2fd477b56dafe4878dd846df6e) as part of the ongoing rolling release updates since specific version information may not be readily available.

Affected Version(s)

MateisHomePage-Website ea2a4226deeca27ab1fb9df0552ec76444547811

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-102292 - Proof of Concept

References

https://vuldb.com/vuln/411182
vdb-entrytechnical-description
https://vuldb.com/vuln/411182/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-102292
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

dexter-morgan (VulDB User)
.