← CVE Intelligence

CVE-2026-77115

Brave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters PUBLISHED

Description (CNA)

Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them.

Affected (CNA)

Vendor / productVersions
Unknown / Braveaffected 0 before 0.8.6

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.