CVE-2026-53722 | Nuxt up to 3.21.6/4.4.6 Query Parameter cross site scripting

June 12, 2026 Yanac

A vulnerability was found in Nuxt up to 3.21.6/4.4.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Query Parameter Handler. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-53722. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More