PT-2026-54982 · Rustaurius+1 · Five Star Business Profile/Schema+1

Daroo

·

CVE-2026-27436

·

Published

2026-06-30

·

Updated

2026-07-09

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Five Star Business Profile and Schema versions prior to 2.3.20
Description Authenticated attackers with Editor-level access and above can achieve Remote Code Execution (RCE), which allows the execution of arbitrary code on the server.
Recommendations Update Five Star Business Profile and Schema to version 2.3.20 or later.

Fix

RCE

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-27436

Affected Products

Five Star Business Profile/Schema
Business-Profile