Description

Lack of output escaping for article titles leads to XSS vectors in various locations.

Remediation

References

CVE-2026-21632

Related Vulnerabilities

WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60202)

WordPress Plugin Slider Hero with Animation, Video Background Cross-Site Request Forgery (8.2.0)

Jenkins Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2017-2612)

ownCloud Uncontrolled Resource Consumption Vulnerability (CVE-2017-5867)

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29516)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2026-21632