Düşük
CVE-2026-120648: CVE-2026-120648: siteler arası betik çalıştırma (XSS)
Açıklama (NVD)
CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment. Arguments are placed between <!-- and --> without escaping, so text containing --> closes the comment early. An application that passes request data to comment can be made to inject HTML into the page.
Özet bilgiler
- EPSS
- %0,21 (yüzdelik 11)
- CWE
- CWE-79
- Yama
- Yok / bilinmiyor