PT-2026-95224 · Unknown · Sigmative Api+1
CVE-2026-92991
·
Published
2026-09-18
·
Updated
2026-09-18
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Biggop Library (affected versions not specified)
Description
Insufficient output escaping allows for Cross-Site Scripting. An attacker who compromises the Sigmative API server can inject arbitrary web scripts into pages via the
display id parameter of the Sigmative API. These scripts execute when a user accesses the affected page.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Biggop Library
Sigmative Api