← Back to CVE search

CVE-2026-7596

ui-ux-pro-max-skill

Description

A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this issue is the function data.get of the file .claude/skills/design-system/scripts/generate-slide.py of the component Slide Generator. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a pull request but has not reacted yet.

CVSS 4.3EPSS 0.377%Risk 0.44
View source
Published
2026-05-01 21:16:18
Affected versions
<=2.5.0
Type
Installed app
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N