Textmetrics, CVE-2026-24564

CVE, Research URL: CVE-2026-24564
Home page URL: Security reports for Textmetrics
Application: Textmetrics
Published on: Jan 23, 2026
Research Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Israpil Textmetrics webtexttool allows Code Injection.This issue affects Textmetrics: from n/a through <= 3.6.3.
Affected versions: max 3.6.3.
Status: vulnerable