1. Home
  2. CVE Database
  3. CVE-2026-41575
MEDIUM · 6.1

CVE-2026-41575

In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application. Unsanitized user input was direct...

Vulnerability Description

In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application. Unsanitized user input was directly rendered in the browser, allowing attackers to execute arbitrary JavaScript. This issue has been patched in version 2.0.1.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
Th30D4YW4Nn4D13\/Ip>= 1.0.1, < 2.0.1

Related Weaknesses (CWE)

CWE-79CWE-80

References

FAQ

What is CVE-2026-41575?

CVE-2026-41575 is a vulnerability with a CVSS score of 6.1 (MEDIUM). In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application. Unsanitized user input was direct...

How severe is CVE-2026-41575?

CVE-2026-41575 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-41575?

Check the references section above for vendor advisories and patch information. Affected products include: Th30D4Y W4Nn4D13\/Ip.