Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
PHP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2026-6735 - Vulnerability Database
PHP

PHP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2026-6735

Medium
Reference: CVE-2026-6735
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-6735
Title: PHP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:

In PHP versions 8.2. before 8.2.31 8.3. before 8.3.31 8.4. before 8.4.21 8.5. before 8.5.6 due to improper sanitation of user data itallows an attacker to compose an URL which will cause the target to execute arbitrary JavaScript code (XSS) on the target39s machine when the target is viewing thePHP-FPM status page.