Product

CERT/CC cveClient/cveInterface.js vulnerabilities

1 published CVE affecting CERT/CC cveClient/cveInterface.js, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest CERT/CC cveClient/cveInterface.js CVEs

Newest publication first

CVE-2026-35466 Stored XSS via unsanitized input from remote service
Published 2026-04-02

MediumCVSS 6.1 EPSS 0.21%

XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.