CVE-2026-82451: Php Unvalidated Referer Hostcve-2026-82451-php-unvalidated-referer-host
HTTP Referer header host is extracted and stored or rendered without domain validation or HTML escaping, which can lead to Stored Cross-Site Scripting (XSS).
Explore
Rule Explorer
Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
- Public rules
- 4797
- Downloads
- 12.1M
- Verified
- 4797
- Authors
- 2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
All matching rules loaded.