Executive brief
PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages
Affected products
- Maven net.sourceforge.pmd:pmd-core
Junglewise Threat Intelligence
CVE-2026-28338: PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages
CVE-2026-28338 · Severity: low · CVSS 3.1 · Published 2026-02-28
Technologies: net.sourceforge.pmd:pmd-core (Maven). Vendors: Maven.