W3

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

W3 records in CISA KEV

No W3 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Amaya 2 records HIGH Css Validator 1 record HIGH Epubcheck 1 record LOW High Resolution Time Api 1 record LOW Spell Checker 1 record LOW Unicorn 1 record LOW Webassembly 1 record MEDIUM

Records

1 record in Css Validator · all components

TI-2025-01533 CVE-2025-1781

XML external entity injection in w3c CSS Validator

HIGH 76

There is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce server-side request forgery (SSRF).

CVSS 4.0HIGH 8.4 Network Low privileges No interaction EPSS 0.00393 Published 2025-03-28 No fix listed CWE-611

Open these records in search →

Critical	2
High	5
Medium	3
Low	1
No CVSS	0