Approved changes feed: RSS · Atom
cpe:2.3:a:toddr:template::plugin::html:*:*:*:*:*:*:*:*
part: a version: * update: plugin
| Vendor | Toddr (7c03a380-f4ad-5ecb-817e-23f3dbeb385c) |
|---|---|
| Product | Template (19014d1b-b2e2-5897-856f-9a29f6b36b81) |
| Edition | * |
| Language | html |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5090 |
vulnerable | 2026-06-08 08:07:02.993371 |
Template::Plugin::HTML versions through 3.102 for Perl allows HTML and JavaScript to be injected
Template::Plugin::HTML versions through 3.102 for Perl allows HTML and JavaScript to be injected.
The html_filter function did not escape single quotes. HTML attributes inside of single quotes could be have code injected. For example, the variable "var" in
<a id='ref' title='[% var | html %]'>
would not be properly escaped. An attacker could insert some limited HTML and JavaScript, for example,
var = " ' onclick='while (true) { alert(1) }'"
Note that arbitrary HTML and JavaScript would be difficult to inject, because angle brackets, ampersands and double-quotes would still be escaped.
Published: 2026-05-19T21:30:03.552Z
Updated: 2026-05-22T06:39:14.682Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.