Vulnerabilities in W3C

4 results

CVE-2021-4296LOWw3c Unicorn ValidatorNuMessage.java ValidatorNuMessage cross site scriptingEPSS 0.6%CVE-2014-125108LOWw3c online-spellchecker-py spellchecker cross site scriptingEPSS 0.5%CVE-2025-1781HIGHThere is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce serEPSS 0.4%CVE-2026-50571MEDIUMWebSub: Reflected script execution through intent-verification challengesEPSS 0.2%