HTML::FormHandler

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenSep 8, 2026
Last mentionedSep 8, 2026

Timeline

4 articles · newest first

CVE-2026-85630: HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process_attrs method

CVE-2026-85630: HTML::FormHandler Perl versions before 0.410002 render field attributes into HTML unescaped, enabling HTML injection.

oss-securitySep 8, 20:30 UTC · Sep 8, 2026Vulnerability 2 sourcesCVE-2026-856302

CVE-2026-85485: HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping

HTML::FormHandler before 0.410002 for Perl renders error messages into HTML unescaped, enabling cross-site scripting (CVE-2026-85485); fixed in 0.410002.

oss-securitySep 8, 20:28 UTC · Sep 8, 2026Vulnerability 2 sourcesCVE-2026-854852 · 1 read

CVE-2026-85484: HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping

HTML::FormHandler before 0.410002 for Perl renders option group and radio button labels unescaped into HTML, enabling XSS (CVE-2026-85484).

oss-securitySep 8, 20:16 UTC · Sep 8, 2026Vulnerability 2 sourcesCVE-2026-854841 · 1 read

CVE-2026-19872: HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message

Perl form library HTML::FormHandler before 0.410000 fixes CVE-2026-19872, a cross-site scripting flaw via unescaped submitted values in error messages.

oss-securitySep 8, 20:14 UTC · Sep 8, 2026Vulnerability 2 sourcesCVE-2026-198723

Related CVEs

by mentions

CVE-2026-85485<1%6.1
Cross-site scripting via unescaped error messages in HTML::FormHandler (Perl)
published Sep 8, 2026HTML::FormHandler project (Perl CPAN module) HTML::FormHandler
CVE-2026-19872<1%6.1
Cross-site scripting in HTML::FormHandler Perl library via unescaped error messages
published Sep 8, 2026HTML::FormHandler (CPAN/Perl) HTML::FormHandler
CVE-2026-85484<1%6.1
Cross-site scripting via unescaped option labels in HTML::FormHandler (Perl)
published Sep 8, 2026HTML::FormHandler project (CPAN) HTML::FormHandler
CVE-2026-85630<1%6.1
Cross-site scripting (XSS) via unescaped attributes in HTML::FormHandler for Perl
published Sep 8, 2026HTML::FormHandler Project (CPAN) HTML::FormHandler (Perl CPAN module)

Entities are extracted by the model from each article. First seen Sep 8, 2026, last mentioned Sep 8, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.