CVE-2026-28179: Damian Góra Fibosearch

Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days.

Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions.

Affected products

• Damian Góra Fibosearch: up to and including 1.33.0

Published 2026-08-06. Last modified 2026-08-12.