CVE-2026-50883 describes an HTML injection vulnerability in the /src/highlight.rs component of matze wastebin v3.4.1. The vulnerability enables attackers to execute arbitrary scripts by submitting crafted payloads that are improperly handled by the affected component. The vulnerability is publicly disclosed but lacks a CVSS score and vendor remediation details. No evidence of active exploitation has been reported.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of users interacting with the vulnerable component, potentially leading to cross-site scripting (XSS)-like impacts such as session hijacking, defacement, or redirection. However, the exact impact depends on the application context and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when handling untrusted input in the affected component and consider applying input sanitization or output encoding as a temporary mitigation.