P4 Verified
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-103354. CVSS base score 7.1 (HIGH, audit@patchstack.com).
- CVE / CWE
- CVE-2026-103354 / CWE-79
- Vendor / product
- Unavailable / Unavailable
- Severity
- 28.4
- CVSS
- 7.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L · audit@patchstack.com
- EPSS
- Unavailable · percentile None ·
- KEV
- no · added unavailable · due unavailable · ransomware use unavailable
- Exploit signals
- Signal evidence
Affected products
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-04 10:08:09.545200+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-04 09:31:05.564409+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-103354.html