Skip to content
OpenAdvisories

Product · CERT/CC

cveClient/cveInterface.js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-35466

    Stored XSS via unsanitized input from remote service

    XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services

    CERT/CC cveClient/cveInterface.js