REDHAT-BUG-2507394: XSS

Q: What conditions are required to exploit this issue?

An attacker would need to cause user-controlled content to be reflected in the XMLRPC-C error page and convince a victim to view that page in a browser. The issue is specifically in the error page component.

Q: Which versions should be considered affected?

XMLRPC-C Library versions 1.07 through 1.67.01 are identified as vulnerable. Systems running a version in that range should be evaluated for the relevant Red Hat updates.

Published Jul 27, 2026

Updated

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

Affected Software

1 affected component

XMLRPC-C XMLRPC-C Library>=1.07<=1.67.01

Event History

Jul 27, 2026

Data Sourced

via Red Hat·03:01 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What conditions are required to exploit this issue?

An attacker would need to cause user-controlled content to be reflected in the XMLRPC-C error page and convince a victim to view that page in a browser. The issue is specifically in the error page component.

Which versions should be considered affected?