CVE-2026-28100
HIGHCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Lifecycle Timeline
2Tags
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider PerpetuumMobile uberSlider_perpetuummobile allows Reflected XSS.This issue affects UberSlider PerpetuumMobile: from n/a through <= 2.3.
Analysis
LambertGroup UberSlider PerpetuumMobile uberSlider_perpetuummobile is affected by cross-site scripting (xss) (CVSS 7.1).
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Identify all systems running uberSlider_perpetuummobile and assess exposure scope; implement immediate input validation and output encoding at the application layer. Within 7 days: Deploy Web Application Firewall (WAF) rules to block XSS payloads; consider disabling the affected component if not business-critical. …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today