JustAppSec
HIGH SeverityCVSS 3.17.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

CVE-2026-42615

Last updated Apr 29, 2026 · Published Apr 29, 2026

← Back to list

Description

GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.

Affected products

1 listed
  • GCHQ:CyberChef

Mappings

CWE

CWE-79

CAPEC

None listed.

Related


CVE® content © MITRE Corporation. Licensed under the CVE Terms of Use. Terms

Need help?Get in touch.