Tag

Client-Side-Injection

1 brief RSS

GeoNetwork Reflected XSS through Client-Side Template Injection (CVE-2026-39379)

A reflected Cross-Site Scripting (XSS) vulnerability, CVE-2026-39379, exists in GeoNetwork due to client-side template injection within error pages, allowing an attacker to craft a URL that, when visited by a victim, causes arbitrary JavaScript to execute in their browser in the context of their authenticated session.

GeoNetwork +3 xss web-vulnerability client-side-injection angularjs ghsa webserver

1r 4t 3d ago