Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/08 3:23 a.m.53 views

CVE-2026-42150 wlc: print_html outputs API data without HTML escaping, enabling stored XSS

wlc is a Weblate command-line client using Weblate's REST API. Prior to version 2.0.0, the HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting when the output is rendered in a browser. This issue has been patched in version 2.0.0...

5.1CVSS0.00174EPSS
SaveExploits0References4
Rows per page
Query Builder