Security Risk Category

cross-site-scripting Security Risks

Published vulnerability pages connected to cross-site-scripting. One risk can appear in multiple categories while keeping one canonical page.

cross-site-scripting risks

Showing 2 of 2 published risks.

mediumEPSS 0.002

Google Chrome WebGL Universal Cross-Site Scripting Vulnerability

Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15127chromechromiumbrowserwebgl

Updated Jul 10, 2026

mediumEPSS 0.002

Google Chrome Forms Universal Cross-Site Scripting Vulnerability

Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15128chromechromiumbrowserforms

Updated Jul 10, 2026