CVE-2025-11276: Rebuild Comment/Guestbook cross site scripting
A security flaw has been discovered in Rebuild up to 4.1.3. Affected by this issue is some unknown functionality of the component Comment/Guestbook. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 4.1.4 can resolve this issue. It is suggested to upgrade the affected component. According to the researcher the vendor has confirmed the flaw and fix in a private issue response.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11276?
CVE-2025-11276 has a critical severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-11276?
To fix CVE-2025-11276, upgrade Rebuild Comment/Guestbook to version 4.1.4 or later.
What versions of Rebuild Comment/Guestbook are affected by CVE-2025-11276?
CVE-2025-11276 affects Rebuild Comment/Guestbook versions up to and including 4.1.3.
Can CVE-2025-11276 be exploited remotely?
Yes, CVE-2025-11276 can be exploited remotely, allowing attackers to perform cross-site scripting.
What type of vulnerability is CVE-2025-11276?
CVE-2025-11276 is a cross-site scripting (XSS) vulnerability.