CVE-2026-34848

MEDIUM

hoppscotch: Stored XSS in team member overflow tooltip via display name

Title source: cna

Description

hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability in the team member overflow tooltip via display name. This issue has been patched in version 2026.3.0.

References (2)

Scores

CVSS v3 5.4
EPSS 0.0003
EPSS Percentile 8.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
hoppscotch/hoppscotch < 2026.3.0 (2 CPE variants)
Published Apr 02, 2026
Tracked Since Apr 03, 2026