CVE-2026-76562

Name of the Vulnerable Software and Affected Versions Sidebar Manager Light versions prior to 1.19

Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts via the sbm description parameter, which execute when a user accesses an affected page.

Recommendations Update Sidebar Manager Light to version 1.19 or later.