6.5
Medium
CVE-2026-97270 Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0 versions
Description
Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CMB2 2.13 | earliest → 2.13.0 | No fix stated |