CVE-2026-28179

FiboSearch versions up to 1.33.0 are vulnerable to a Cross Site Scripting (XSS) flaw in the shop manager component, allowing attackers to inject malicious scripts that could execute in the context of a user's session. This vulnerability poses a medium risk, as it could lead to unauthorized actions or data exposure for users interacting with the affected systems. E-commerce platforms and web administrators utilizing FiboSearch should prioritize remediation to safeguard against potential exploitation.