Web Application Security

CVE-2026-41575 — DOM-Based XSS in IP Reputation Checker

Moderate-severity DOM-based cross-site scripting in IP Reputation Checker where insufficient sanitization of user-controlled input before DOM insertion allows arbitrary script execution in the victim's browser.

Overview

CVE-2026-41575 is a moderate-severity DOM-Based Cross-Site Scripting (XSS) vulnerability affecting the IP Reputation Checker application. The issue originated from insufficient sanitization of user-controlled input before it was inserted into the Document Object Model (DOM). An attacker could craft malicious input containing executable JavaScript, causing arbitrary script execution within the victim’s browser context.

Technical Description

The affected application dynamically rendered user-supplied values within the browser without properly escaping or sanitizing potentially dangerous HTML or JavaScript content. Because the processing occurred entirely on the client side, malicious payloads could execute when the vulnerable component parsed and inserted attacker-controlled data into the DOM.

Potential Impact

Successful exploitation could potentially allow:

  • Execution of arbitrary JavaScript.
  • Session hijacking.
  • Credential theft.
  • Client-side compromise.
  • DOM manipulation and phishing-style attacks.

The overall impact depends on the privileges and session state of the affected user.

Affected and Fixed Versions

Affected1.0.1
Fixed2.0.1

Remediation

The vulnerability was fully addressed in IP Reputation Checker v2.0.1:

  • Added proper sanitization for all user-controlled input before DOM insertion.
  • Replaced unsafe rendering methods with safer alternatives.
  • Implemented output encoding for dynamically generated content.
  • Reviewed client-side components for additional DOM injection points.
  • Removed insecure patterns that allowed direct rendering of untrusted data.
  • Improved input validation to reject malformed or potentially dangerous values.
  • Conducted post-remediation verification confirming arbitrary JavaScript execution was no longer possible.

References

Reporter: krraze  ·  Coordinators: 0x5t4l1n (Stalin S), harriiinnii (Harini M) — Research. Remediate. Reinforce.