Description
XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CERT/CC | cveClient/cveInterface.js | < 1.0.24 | 1.0.24 |
Medium · 6.1
CVE-2026-35466
EUVD-2026-18552GHSA-c5mh-66wj-fpf7
Stored XSS via unsanitized input from remote service
Published Apr 2, 2026 · Updated Apr 3, 2026 · Assigned by certcc