Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/fevar54/cve-2026-32635-angular-xss-mitigation-
Static AnalysisVulnerability AnalysisCode AnalysisWeb SecurityLearning & Education
GitHubfevar54/cve-2026-32635-angular-xss-mitigation-

CVE-2026-32635-Angular-XSS-Mitigation-

Demostracion educativa de mitigacion y deteccion de CVE-2026-32635: XSS en atributos i18n de Angular.

View Repository

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
1 day agoNot yet reviewed
Share

CVE-2026-32635: Angular i18n Attribute XSS - Mitigation & Detection PoC

📌 Overview

This repository contains an educational demonstration of the mitigation and detection for CVE-2026-32635, a Cross-Site Scripting (XSS) vulnerability in Angular that affects internationalized (i18n) attributes.

Vulnerability context:

  • The vulnerability occurs when i18n-<attribute> is used together with data binding to unsanitized values
  • It affects sensitive attributes such as: href, src, action, poster, data, etc.
  • CVSS v4: 9.0 (CRITICAL) - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H
  • CWE-79: Improper Neutralization of Input During Web Page Generation
  • Patched in: 22.0.0-next.3, , ,
21.2.4
20.3.18
19.2.20

🎯 Attack Vector

root@kitploit:~
<!-- Vulnerable code -->
<a href="{{userInput}}" i18n-href>Click me</a>
Download Tool