CVE-2026-27020
Photobooth prior to 1.0.1 has a cross-site scripting (XSS) vulnerability in user input fields.
Published Feb 20, 2026 · updated Jun 17, 2026
Photobooth prior to 1.0.1 has a cross-site scripting (XSS) vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerability is fixed in 1.0.1.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Feb 20, 2026 · NIST NVD
Detected
Photobooth prior to 1.0.1 has a cross-site scripting (XSS) vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerability is fixed in 1.0.1.
Jun 17, 2026 · NIST NVD
Updated
Photobooth prior to 1.0.1 has a cross-site scripting (XSS) vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerability is fixed in 1.0.1.
Sources
- CVE.orgVulnerability recordCVE-2026-27020
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-27020
Photobooth prior to 1.0.1 has a cross-site scripting (XSS) vulnerability in user input fields. Malicious users could inject scripts through unvalidated form inputs. This vulnerability is fixed in 1.0.1.
nvd.nist.gov