CVE-2026-71454: Cwe-79 - Cross-Site Scripting Capec-63

Medium severity, CVSS 5.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS). This issue affects CAPEC-63: before 3.0b63.

Affected products

• Cwe-79 - Cross-Site Scripting Capec-63: before 3.0b63 (fixed in 3.0b63)

Published 2026-10-01. Last modified 2026-10-02.