What’s Vulnerable › Products

haxtheweb iframe-loader vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your haxtheweb iframe-loader version is affected

Latest haxtheweb iframe-loader vulnerabilities

• CVE-2026-46396 — HAX CMS has a stored XSS via <iframe> that allows access to sensitive client-side data and account takeover (CVSS 9.3)