01 Record

CVE-2026-61824

Defuddle: XSS via unescaped attribute interpolation in site extractors

HighPUBLISHEDCNA: GitHub_M

Base score8.2 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

02 Description

Defuddle: XSS via unescaped attribute interpolation in site extractors

Published

2026-08-21 20:12Z5 HR AGO

Last updated

2026-08-21 20:12Z5 HR AGO

Reserved

2026-07-10

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

High (CVSS 8.2)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Weaknesses

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Base
CWE-116Improper Encoding or Escaping of OutputClass

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

ffe9289f65ca4a9dc52d02988cf91fe6a37647475346e77890b07b148007fba1

VendorProductVersionsPlatforms

kepanodefuddle< 0.19.1—