{"id":82605,"date":"2026-07-28T00:47:17","date_gmt":"2026-07-27T21:17:17","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2026-66824-stored-cross-site-scripting-via-unsafe-capture-tree-json-embedding\/"},"modified":"2026-07-28T00:47:17","modified_gmt":"2026-07-27T21:17:17","slug":"cve-2026-66824-stored-cross-site-scripting-via-unsafe-capture-tree-json-embedding","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2026-66824-stored-cross-site-scripting-via-unsafe-capture-tree-json-embedding\/","title":{"rendered":"CVE-2026-66824 &#8211; Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding"},"content":{"rendered":"<p>CVE ID :CVE-2026-66824<\/p>\n<p>  Published : July 27, 2026, 9:17 p.m. | 39\u00a0minutes ago<\/p>\n<p>  Description :A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture tree directly into an inline JavaScript block using the Jinja safe filter.<\/p>\n<p>Because the tree data can contain values derived from captured and potentially attacker-controlled web content, a specially crafted value could prematurely terminate the surrounding\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID :CVE-2026-66824 Published : July 27, 2026, 9:17 p.m. | 39\u00a0minutes ago Description :A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture tree directly into an inline JavaScript block using the Jinja safe filter. Because the tree data can contain values derived from captured and &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-82605","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/82605","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=82605"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/82605\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=82605"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=82605"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=82605"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}