CVE-2026-33403

CVE-2026-33403 concerns Pi-hole Admin Interface. A reflected DOM-based XSS in taillog.js from 6.0 up to before 6.5 allows an unauthenticated attacker to inject arbitrary HTML via a crafted URL, since the query parameter is interpolated into innerHTML without escaping. The vulnerability is aggrava...