W3C vulnerabilities
4 published CVEs name W3C among the affected products.
- 4Published CVEs4 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-50571
WebSub: Reflected script execution through intent-verification challenges
w3c · websub
Medium5.7 - CVE-2025-1781
There is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce server-side request…
W3C · CSS Validator
High8.4 - CVE-2014-125108
w3c online-spellchecker-py spellchecker cross site scripting
w3c · online-spellchecker-py
Low3.1 - CVE-2021-4296
w3c Unicorn ValidatorNuMessage.java ValidatorNuMessage cross site scripting
w3c · Unicorn
Low3.5