Tag

Cve-2026-61825

1 brief RSS

Stored XSS Vulnerability in Code16 Sharp via iframe srcdoc Attribute

A stored XSS vulnerability in the Code16 Sharp rich text editor allows authenticated attackers to execute arbitrary JavaScript by exploiting browser-side HTML entity decoding within the iframe srcdoc attribute.

Sharp web-application xss vulnerability cve-2026-61825

2t 1c 55m ago