HIGHnpm
GHSA-jh3h-rpxg-fr36· CVE-2026-46396Stored XSS via <iframe> in HAX CMS allows access to sensitive client-side data and account takeover
Modified: 9/10/2026
package
npm/@haxtheweb/iframe-loader
pkg:npm/%40haxtheweb/iframe-loader
package
pkg:npm/%40haxtheweb/iframe-loader
Stored XSS via <iframe> in HAX CMS allows access to sensitive client-side data and account takeover
Modified: 9/10/2026