← CVE Intelligence

CVE-2026-35466

Stored XSS via unsanitized input from remote service PUBLISHED

Description (CNA)

XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services

Affected (CNA)

Vendor / productVersions
CERT/CC / cveClient/cveInterface.jsaffected 0 before 1.0.24

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.