CVE-2026-27403

Hubbub Lite versions up to 1.36.3 are vulnerable to a stored cross-site scripting (XSS) flaw due to improper input neutralization during web page generation. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of users' browsers, potentially leading to data theft or session hijacking. Organizations using affected versions should prioritize remediation to protect their users and maintain application integrity.