W3C vulnerabilities
4 published CVEs name W3C among the affected products.
- Published CVEs
- 4
- Last 12 months
- 1
- Critical
- 0
- Known exploited
- 0
Critical 0High 1Medium 1Low 2Not scored 0
CVEs per yearBy the year they were published
- 20221
- 20231
- 20251
- 20261
Newest CVEs
- CVE-2026-50571
WebSub: Reflected script execution through intent-verification challenges
w3c · websub
Medium5.7 - CVE-2025-1781
There is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML objects to coerce server-side request…
W3C · CSS Validator
High8.4 - CVE-2014-125108
w3c online-spellchecker-py spellchecker cross site scripting
w3c · online-spellchecker-py
Low3.1 - CVE-2021-4296
w3c Unicorn ValidatorNuMessage.java ValidatorNuMessage cross site scripting
w3c · Unicorn
Low3.5