Skip to content
7.1 High

CVE-2025-26589 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristopher Dino IE…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristopher Dino IE CSS3 Support ie-css3-support allows Reflected XSS.This issue affects IE CSS3 Support: from n/a through <= 2.0.1.

Affected products and versions

Product Affected versions Fixed in
IE CSS3 Support 2.0 earliest → 2.0.1 No fix stated
IE CSS3 Support 2.0 earliest → 2.0.1 No fix stated
Track this CVE