Product

Microsoft.AspNetCore.Components.WebAssembly.Server (>= 9.0.0, <= 9.0.20)

1 brief RSS

CVE-2026-96230 ASP.NET Core Cross-Site Scripting Vulnerability

An unencoded exception reflection vulnerability in the Blazor WebAssembly development server allows remote attackers to perform cross-site scripting (XSS) via the unauthenticated /_framework/debug endpoint.

Microsoft.AspNetCore.Components.WebAssembly.Server +3 xss dot-net web-application cve-2026-96230

1c 2h ago