VulnSocial

CVE-2026-34033General(apache / answer)

LOWCVSS 5.4 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. User-supplied content was included in notification emails without proper escaping, allowing authenticated users to inject arbitrary HTML into emails sent to other users. Users are recommended to upgrade to version 2.0.1, which fixes the issue.

apache CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-80CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • answer

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
apache
Products
answer

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-06-09: 3Technical Details · 2026-06-09: 206-09
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-34033 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. User-… https://www.cve.org/CVERecord?id=CVE-2026-34033 ----- Traducción: CVE-2026-34033 Neu… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-34033, a Basic XSS issue in Apache Answer, giving a brief description but no evidence of PoC, exploit, active use, or patch.

    0000031
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-34033 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. User-… https://www.cve.org/CVERecord?id=CVE-2026-34033

    Post summary

    The text announces a newly discovered Basic XSS vulnerability (CVE-2026-34033) in Apache Answer and offers no evidence of exploitation, PoC, or patch.

    00000278
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-34033 CVE-2026-34033 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34033

    Post summary

    The post merely lists CVE-2026-34033 twice and provides a link to VulMon's details page, offering no additional information about exploitation status, patches, or technical specifics.

    0000046
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appapacheanswer---

Explore more

Back to dashboardapache CVEsanswer vulnerabilities