CVE-2026-115897 | Yahoo Serialize JavaScript up to 7.1.2 Escaping Logic toString cross site scripting (EUVD-2026-109190)

October 23, 2026 Yanac

A vulnerability was found in Yahoo Serialize JavaScript up to 7.1.2. It has been declared as problematic. Affected is the function toString of the component Escaping Logic. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2026-115897. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More