Product

Microsoft.AspNetCore.Components.WebAssembly.Server (>= 11.0.0-Preview.1, <= 11.0.0-Rc.1)

1 brief RSS

CVE-2026-96230 ASP.NET Core Cross-Site Scripting Vulnerability

An unencoded exception reflection vulnerability in the Blazor WebAssembly development server allows remote attackers to perform cross-site scripting (XSS) via the unauthenticated /_framework/debug endpoint.

Microsoft.AspNetCore.Components.WebAssembly.Server +3 xss dot-net web-application cve-2026-96230

1c 2h ago