VULNERABILITY INTELLIGENCE

CVE-2026-24621

CVSS score5.9 MEDIUM

EPSS probability0.17%

CISA KEVNot currently listed

Published2026-01-23

Last modified2026-06-17

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through <= 3.4.9.