CVE-2026-78190

WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values, allowing cross-site scripting. The textfield, passwordfield and filefield tags fill their value attribute from the request parameter of the same name. WEBDYNECGIAUTOESCAPE, which control...