CVE-2026-50883

CRITICAL EPSS 29.2%

Published Jun 15, 20262w ago · Modified Jun 17, 20261w ago

9.6 CVSS 3.1

Critical

Published Jun 15, 2026 2w ago

Last Modified Jun 17, 2026 1w ago

Description

An HTML injection vulnerability in the /src/highlight.rs component of matze wastebin v3.4.1 allows attackers to execute arbitrary scripts via a crafted payload.

CVSS Details

Base Score

9.6

Exploitability

2.8

Impact

6.0

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction Required

Scope Changed

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

29.2% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

References 1

gist.github.com https://gist.github.com/pyuysig/eb74ae37c49d0383bedc08881c2493c4

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.