Vulnerabilities in W3C

3 results

CVE-2021-4296LOWw3c Unicorn ValidatorNuMessage.java ValidatorNuMessage cross site scriptingEPSS 0.5%CVE-2014-125108LOWw3c online-spellchecker-py spellchecker cross site scriptingEPSS 0.5%CVE-2025-1781HIGHThere is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce serEPSS 0.3%