CVE-2026-127285 | Cairo-dock Glx-Dock 3.4.0 href Attribute bg_forum.php cross site scripting

November 12, 2026 Yanac

A vulnerability has been found in Cairo-dock Glx-Dock 3.4.0 and classified as problematic. The affected element is an unknown function of the file bg_forum.php of the component href Attribute Handler. This manipulation of the argument f causes cross site scripting.

This vulnerability appears as CVE-2026-127285. The attack may be initiated remotely. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More