Threats tagged 'ghsa-8ggv-vmgf-36wq'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.8	EPSS 0.4%	CVE-2026-67352openwrt luci · Cross-site Scripting Medium6.8EPSS 0.4%2026-08-01CVE Database V5CVE-2026-67352 luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolver_url parameter that allows authenticated users to inject active HTML. When an administrator views the HTTPS DNS Proxy status page, the resolver URL is rendered as raw HTML and executes JavaScript in the administrator's browser origin. EPSS 0.4%Vulnerability #ghsa-8ggv-vmgf-36wq	CVE Database V5	2026-08-01

Page 1 of 1