{"id":"CVE-2026-85485","title":"HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping.\n\nThe Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup","summary":"HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping.\n\nThe Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0…","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"product":"HTML-FormHandler","affected":["HTML-FormHandler < 0.410002"],"published":"2026-09-08","updated":"2026-09-10","sourceUpdated":"2026-09-10T18:18:09.707","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-85485","references":[{"url":"https://github.com/gshank/html-formhandler/commit/2ea9e138dbfe231e317c13936abe6583217c807f.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"url":"https://metacpan.org/release/ABRAXXA/HTML-FormHandler-0.410002/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85485.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-85485"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-85485"}],"tags":["nvd","cve.org","csaf","vex","red-hat","score-dispute"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T17:48:48.457630Z"},"epss":0.00207,"epssPercentile":0.1108,"ingestedAt":"2026-09-08T21:11:12.320Z","vendor":"Red Hat","scores":{"nvd":6.1,"vendor":8.1},"slug":"CVE-2026-85485","body":"## Overview\n\nHTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping.\n\nThe Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0.410000, the fix for CVE-2026-19872, escaped the equivalent values in the other layouts and wrappers, and 0.410002 extended that to these three.\n\nError messages that contain attacker-influenced content such as rejected field values could embed JavaScript in rendered pages.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-15 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85485.json)","depth":"sunlit","depthScore":34,"depthScoreParts":{"impact":33.6,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202035,"id":"CVE-2026-85485","ts":1789400046427,"field":"cvss","old":null,"new":"6.1"},{"seq":202034,"id":"CVE-2026-85485","ts":1789400046427,"field":"severity","old":"none","new":"medium"},{"seq":200762,"id":"CVE-2026-85485","ts":1789397612847,"field":"cvss","old":"6.1","new":null},{"seq":200761,"id":"CVE-2026-85485","ts":1789397612847,"field":"severity","old":"medium","new":"none"},{"seq":199457,"id":"CVE-2026-85485","ts":1789395514109,"field":"cvss","old":null,"new":"6.1"},{"seq":199456,"id":"CVE-2026-85485","ts":1789395514109,"field":"severity","old":"none","new":"medium"},{"seq":198702,"id":"CVE-2026-85485","ts":1789392240505,"field":"cvss","old":"6.1","new":null},{"seq":198701,"id":"CVE-2026-85485","ts":1789392240505,"field":"severity","old":"medium","new":"none"},{"seq":197035,"id":"CVE-2026-85485","ts":1789384290961,"field":"cvss","old":null,"new":"6.1"},{"seq":197034,"id":"CVE-2026-85485","ts":1789384290961,"field":"severity","old":"none","new":"medium"},{"seq":194164,"id":"CVE-2026-85485","ts":1789378778666,"field":"cvss","old":"6.1","new":null},{"seq":194163,"id":"CVE-2026-85485","ts":1789378778666,"field":"severity","old":"medium","new":"none"},{"seq":192951,"id":"CVE-2026-85485","ts":1789376513498,"field":"cvss","old":null,"new":"6.1"},{"seq":192950,"id":"CVE-2026-85485","ts":1789376513498,"field":"severity","old":"none","new":"medium"},{"seq":191738,"id":"CVE-2026-85485","ts":1789373627759,"field":"cvss","old":"6.1","new":null},{"seq":191737,"id":"CVE-2026-85485","ts":1789373627759,"field":"severity","old":"medium","new":"none"},{"seq":190523,"id":"CVE-2026-85485","ts":1789369472342,"field":"cvss","old":null,"new":"6.1"},{"seq":190522,"id":"CVE-2026-85485","ts":1789369472342,"field":"severity","old":"none","new":"medium"},{"seq":189310,"id":"CVE-2026-85485","ts":1789368405776,"field":"cvss","old":"6.1","new":null},{"seq":189309,"id":"CVE-2026-85485","ts":1789368405776,"field":"severity","old":"medium","new":"none"},{"seq":188093,"id":"CVE-2026-85485","ts":1789365229162,"field":"cvss","old":null,"new":"6.1"},{"seq":188092,"id":"CVE-2026-85485","ts":1789365229162,"field":"severity","old":"none","new":"medium"},{"seq":186880,"id":"CVE-2026-85485","ts":1789363468230,"field":"cvss","old":"6.1","new":null},{"seq":186879,"id":"CVE-2026-85485","ts":1789363468230,"field":"severity","old":"medium","new":"none"},{"seq":185666,"id":"CVE-2026-85485","ts":1789361227385,"field":"cvss","old":null,"new":"6.1"},{"seq":185665,"id":"CVE-2026-85485","ts":1789361227385,"field":"severity","old":"none","new":"medium"},{"seq":184453,"id":"CVE-2026-85485","ts":1789358360164,"field":"cvss","old":"6.1","new":null},{"seq":184452,"id":"CVE-2026-85485","ts":1789358360164,"field":"severity","old":"medium","new":"none"},{"seq":182704,"id":"CVE-2026-85485","ts":1789354315568,"field":"cvss","old":null,"new":"6.1"},{"seq":182703,"id":"CVE-2026-85485","ts":1789354315568,"field":"severity","old":"none","new":"medium"},{"seq":181497,"id":"CVE-2026-85485","ts":1789353313966,"field":"cvss","old":"6.1","new":null},{"seq":181496,"id":"CVE-2026-85485","ts":1789353313966,"field":"severity","old":"medium","new":"none"},{"seq":180290,"id":"CVE-2026-85485","ts":1789350283216,"field":"cvss","old":null,"new":"6.1"},{"seq":180289,"id":"CVE-2026-85485","ts":1789350283216,"field":"severity","old":"none","new":"medium"},{"seq":179083,"id":"CVE-2026-85485","ts":1789348288725,"field":"cvss","old":"6.1","new":null},{"seq":179082,"id":"CVE-2026-85485","ts":1789348288725,"field":"severity","old":"medium","new":"none"},{"seq":177876,"id":"CVE-2026-85485","ts":1789346368474,"field":"cvss","old":null,"new":"6.1"},{"seq":177875,"id":"CVE-2026-85485","ts":1789346368474,"field":"severity","old":"none","new":"medium"},{"seq":176669,"id":"CVE-2026-85485","ts":1789343179978,"field":"cvss","old":"6.1","new":null},{"seq":176668,"id":"CVE-2026-85485","ts":1789343179978,"field":"severity","old":"medium","new":"none"},{"seq":174786,"id":"CVE-2026-85485","ts":1789334874145,"field":"cvss","old":null,"new":"6.1"},{"seq":174785,"id":"CVE-2026-85485","ts":1789334874145,"field":"severity","old":"none","new":"medium"},{"seq":173581,"id":"CVE-2026-85485","ts":1789333685388,"field":"cvss","old":"6.1","new":null},{"seq":173580,"id":"CVE-2026-85485","ts":1789333685388,"field":"severity","old":"medium","new":"none"},{"seq":172395,"id":"CVE-2026-85485","ts":1789331091483,"field":"cvss","old":null,"new":"6.1"},{"seq":172394,"id":"CVE-2026-85485","ts":1789331091483,"field":"severity","old":"none","new":"medium"},{"seq":171209,"id":"CVE-2026-85485","ts":1789328777505,"field":"cvss","old":"6.1","new":null},{"seq":171208,"id":"CVE-2026-85485","ts":1789328777505,"field":"severity","old":"medium","new":"none"},{"seq":170004,"id":"CVE-2026-85485","ts":1789327195621,"field":"cvss","old":null,"new":"6.1"},{"seq":170003,"id":"CVE-2026-85485","ts":1789327195621,"field":"severity","old":"none","new":"medium"}]}