CVE-2026-114627

The Web::Simple module for Perl (versions before 0.036 ) is vulnerable to Cross-Site Scripting (XSS) via the HTML::Tags and XML::Tags components. The root cause is that values interpolated into double-quoted strings are stored as separate parts in a StringThing object; while standalone values are...