THREATOPS
THREAT OPSThreat News › CVE-2026-19872: HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message

CVE-2026-19872: HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message

medoss_secPublished 2026-09-08

<p>Posted by Robert Rothenberg on Sep 08</p>========================================================================<br /> CVE-2026-19872                                       CPAN Security Group<br /> ========================================================================<br /> <br />         CVE ID:  CVE-2026-19872<br />   Distribution:  HTML-FormHandler<br />       Versions:  before 0.41000

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/679