CVE-2026-90563: Maliangnansheng Bbs-Springboot

Low severity, CVSS 3.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely.

Affected products

• Maliangnansheng Bbs-Springboot: version 3.0.0 only

Published 2026-09-13. Last modified 2026-09-16.