CVE-2025-45286

A cross-site scripting (XSS) vulnerability exists in mccutchen httpbin v2.17.1 due to the improper neutralization of script-related HTML tags. This allows an attacker to execute arbitrary web scripts or HTML by providing a crafted payload via unrestricted client control over the Content-Type head...