medium4.4
CVE-2026-77643
A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTM…
Impact
A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet(). NOTE: this issue exists because of a missed corner case of CVE-2018-0499.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xapian | Xapian Xapian-Core | before 2.1.0 |
| And | before 1.4.32 |
Versions were read from the advisory text. No structured product data has been published for this record yet.