CERT/CC cveClient/cveInterface.js vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting CERT/CC cveClient/cveInterface.js: 1 record(s), with affected versions and fixes.
CVE-2026-35466
Medium · 6.1
CWE-79 Apr 2, 2026
Stored XSS via unsanitized input from remote service
XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services