Cpe:2.3:a:microsoft:microsoft_aspnetcore_components_webassembly_server:*:*:*:*:*:*:*:*

An unencoded exception reflection vulnerability in the Blazor WebAssembly development server allows remote attackers to perform cross-site scripting (XSS) via the unauthenticated /_framework/debug endpoint.