Read the docs

pragdave

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

pragdave records in CISA KEV

No pragdave vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-35947 CVE-2026-48591 · GHSA-52mm-h59v-f3c7

Stored XSS via unescaped HTML attribute values in earmark

Priority LOW 21

Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allows stored cross-site scripting via unescaped HTML attribute values.

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.00133 Published 2026-06-17 No fix listed CWE-83
Open these records in search →