Threats tagged 'brew-acronym-cve-2026-33230'

NLTK's WordNet Browser web UI contains a reflected cross-site scripting (XSS) vulnerability in the lookup route. The issue arises because attacker-controlled input is reflected into the HTML response without proper escaping, allowing injection of arbitrary JavaScript. This affects users running the local or self-hosted WordNet Browser HTTP service. An attacker can exploit this by convincing a user to open a crafted URL, leading to script execution in the browser context of the application.