THREAT OPS › Threat News › CVE-2026-19872: HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message
CVE-2026-19872: HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message
<p>Posted by Robert Rothenberg on Sep 08</p>========================================================================<br /> CVE-2026-19872 CPAN Security Group<br /> ========================================================================<br /> <br /> CVE ID: CVE-2026-19872<br /> Distribution: HTML-FormHandler<br /> Versions: before 0.41000
Indicators of compromise
- CVE-2026-19872cve
- https://metacpan.org/dist/HTML-FormHandlerurl
Original source: https://seclists.org/oss-sec/2026/q3/679