CVE Catalog
CVE-2026-35508
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.15%
5th percentile - higher than 5% of all known CVEs
Summary
Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters.
Risk Assessment
An attacker can inject malicious script that executes in the victim's browser, potentially leading to session theft, redirects, or other attacks.
Recommendation
Update Shynet to version 0.14.0 or later.
Original NVD description (English source)
Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,