CVE-2026-37468: XSS

Published Oct 30, 2026

Updated

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component.

Event History

Oct 30, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker can exploit it remotely with low attack complexity and no privileges. User interaction is required for the attack to have an effect.

Which parts of the application are involved?

The issue is associated with the Profile editing functionality and the chat messaging component.

Which releases are identified as affected?

BeeHome MyBeeHome releases before 2025-11-01 are identified as affected.

CVE-2026-37468: XSS

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which parts of the application are involved?

Which releases are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which parts of the application are involved?

Which releases are identified as affected?