CVE-2026-78190

The WebDyne software (versions 2.014 before 3.022 for Perl) is vulnerable to cross-site scripting (XSS) because request parameters are reflected into form field values without proper escaping. Specifically, the textfield, password_field, and filefield tags populate their value attributes from req...

EUVD-2026-114716

WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values, allowing cross-site scripting. The textfield, passwordfield and filefield tags fill their value attribute from the request parameter of the same name. WEBDYNECGIAUTOESCAPE, which control...

CVE-2026-78190: WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values, allowing…

WebDyne versions from 2.014 before 3.022 for Perl reflect request parameters unescaped into form field values, allowing cross-site scripting. The textfield, passwordfield and filefield tags fill their value attribute from the request parameter of the same name. WEBDYNECGIAUTOESCAPE, which control...