CVE-2026-27787 — ICZ Corporation / MATCHA SNS

CVE-2026-27787

ICZ Corporation / MATCHA SNS PUBLISHED

Description (CNA)

Cross-site scripting vulnerability exists in MATCHA SNS 1.3.9 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product.

Affected (CNA)

Vendor / product	Versions
ICZ Corporation / MATCHA SNS	affected 1.3.9 and earlier

CWE

CWE-79

References

https://oss.icz.co.jp/news/?p=1388
https://jvn.jp/en/jp/JVN33581068/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.