CVE-2026-85485

The HTML::FormHandler Perl module in versions before 0.410002 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the failure to properly escape certain error messages when rendered into HTML. Specifically, the Table form layout and the Bootstrap 2 and 3 wrappers splice error strings ...