Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-24824

A XSS in yacy/yacy_search_server

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in yacy yacy_search_server (source/net/yacy/http/servlets modules). This vulnerability is associated with program files YaCyDefaultServlet.Java. This issue affects yacy_search_server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

yacy yacy_search_server

Default version status: affected

  • 0 to ≤ 1.92affected

References