Leafkit
1 CVEs
product
Monthly
Leafkit versions up to 1.4.1 contains a vulnerability that allows attackers to XSS if there is a leaf variable in the attribute that is user controlled (CVSS 6.1).
XSS
Leafkit
NVD
GitHub
CVSS 3.1
6.1
EPSS
0.0%
CVE-2026-27120
EPSS 0%
CVSS 6.1
MEDIUM
POC
PATCH
This Month
Leafkit versions up to 1.4.1 contains a vulnerability that allows attackers to XSS if there is a leaf variable in the attribute that is user controlled (CVSS 6.1).
XSS
Leafkit
NVD
GitHub