CVE-2026-14704

EUVD-2026-41725
A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionality. Performing a manipulation of the argument code results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
Common Weakness Enumeration
References
https://github.com/stephen-kruger/bluebox/
https://github.com/stephen-kruger/bluebox/issues/32
https://github.com/stephen-kruger/bluebox/issues/32#issuecomment-4632135192
https://vuldb.com/cve/CVE-2026-14704
https://vuldb.com/submit/847357
https://vuldb.com/vuln/376300
https://vuldb.com/vuln/376300/cti