CVE-2026-56858

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description Pathological inputs can cause an unescaped '/' to close prematurely. This allows attack-controlled data to inject arbitrary content, which may lead to Cross-Site Scripting (XSS), a technique where malicious scripts are injected into trusted websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.