CVE-2026-23769 - AskarLabs CVE Database

CVE-2026-23769

Weakness CWE-79 · XSS

Published January 16, 2026

Last update January 16, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files.

Key dates

02Disclosure timeline

January 16, 2026 CVE published

January 16, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-23769 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2024-49288 WordPress Email Template Customizer for WooCommerce plugin <= 1.2.9.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-24028 Cross-site Scripting (XSS) in Rich Text Editor allows arbitrary code execution in Joplin CVE-2020-6973 CVE-2025-40651 Reflected Cross Site Scripting (XSS) in Real Easy Store CVE-2024-8653 Netcat CMS: multiple reflected cross-site scripting vulnerabilities in netshop module