CVE-2026-72553 | ElkArte up to 2.0 Profile cust_blurb/cust_locate cross site scripting

A vulnerability identified as problematic has been detected in ElkArte up to 2.0. The affected element is an unknown function of the component Profile. This manipulation of the argument cust_blurb/cust_locate causes cross site scripting.

This vulnerability is registered as CVE-2026-72553. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More