Cross-site Scripting (XSS)

🗓️ 12 Jan 2026 08:51:19Reported by Veracode Vulnerability DatabaseType

Angular is vulnerable to cross site scripting because the Template Compiler fails to recognize href and xlink:href in SVG.

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities related to Angular and JJWT have been fixed in IBM Informix HQ 3.2.2.	27 Apr 202606:31	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of compiler-18.2.14.tgz, IBM Sterling Connect:Direct Web Services is affected by Cross-Site Scripting (XSS).	2 Jun 202614:44	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of core-18.2.14.tgz, IBM Sterling Connect:Direct Web Services is affected by cross-site scripting (XSS) issue.	2 Jun 202614:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 Mirror for i is vulnerable to cross-site scripting and cross-site request forgery due to Angular [CVE-2025-66412, CVE-2026-22610, CVE-2025-66035]	20 Feb 202616:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by Cross-Site Request Forgery and Cross-Site Scripting in Digital Certificate Manager and Navigator for i [CVE-2025-66035, CVE-2025-66412, CVE-2026-22610]	20 Feb 202616:42	–	ibm
GithubExploit	Exploit for CVE-2026-22610	18 Jan 202611:38	–	githubexploit
Circl	CVE-2026-22610	10 Jan 202605:03	–	circl
CNNVD	Angular 跨站脚本漏洞	10 Jan 202600:00	–	cnnvd
CVE	CVE-2026-22610	10 Jan 202603:35	–	cve
Cvelist	CVE-2026-22610 Angular has XSS Vulnerability via Unsanitized SVG Script Attributes	10 Jan 202603:35	–	cvelist

Vulners

Node

core @angular/coreRange21.1.0-next.0–21.1.0-next.4js

core @angular/coreRange21.0.0-next.0–21.0.6js

core @angular/coreRange20.0.0-next.0–20.3.15js

core @angular/coreRange6.0.0-beta.8–18.2.14js

core @angular/coreRange19.0.0-next.0–19.2.17js

adobe @angular/compilerRange21.1.0-next.0–21.1.0-next.4js

adobe @angular/compilerRange21.0.0-next.0–21.0.6js

adobe @angular/compilerRange20.0.0-next.0–20.3.15js

adobe @angular/compilerRange19.0.0-next.0–19.2.17js

adobe @angular/compilerRange6.0.0-beta.8–18.2.14js

Source	Link
github	www.github.com/angular/angular/pull/66318
github	www.github.com/angular/angular/commit/91dc91bae4a1bbefc58bef6ef739d0e02ab44d56
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-485750.html
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-253495.html
github	www.github.com/advisories/GHSA-jrmj-c5cx-3cw6
github	www.github.com/angular/angular/security/advisories/GHSA-jrmj-c5cx-3cw6

02 Jun 2026 16:33Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.1

CVSS 48.5

EPSS0.0002

SSVC