OCTOBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-96836

HIGH · CVSS 7.1 EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-09-30 · Last synced 2026-10-08

CyberRota Analysis

AI-Generated

Parsi Date versions up to 6.3 are vulnerable to an unauthenticated Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to session hijacking, data theft, or defacement of the website. Organizations using this software should prioritize patching or upgrading to mitigate potential exploitation risks.

CVE
CVE-2026-96836
Severity
HIGH
CVSS
7.1
EPSS
0.20%

Original NVD Description

Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.