CVE-2026-85484

The HTML::FormHandler Perl module versions before 0.410002 fail to properly escape option group labels and radio button labels when rendering them into HTML. Specifically, the Select , RadioGroup , CheckboxGroup , and HorizCheckboxGroup widgets render group labels unescaped, with Select placing l...