Threats tagged 'ghsa-9c86-c5c2-55cr'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.5	EPSS 0.3%	CVE-2026-71274openshwprojects OpenBK7231T_App · Cross-site Scripting High8.5EPSS 0.3%2026-08-05CVE Database V5CVE-2026-71274 OpenBK7231T's CHANNEL_SetLabel (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization. CHANNEL_GetLabel returns these labels unsanitized, and they are rendered via hprintf255 at 15+ locations in src/httpserver/http_fns.c with no HTML encoding. EPSS 0.3%Vulnerability CWE-79 #ghsa-9c86-c5c2-55cr	CVE Database V5	2026-08-05

Page 1 of 1