https://advisories.gitlab.com/maven/net.sourceforge.pmd/pmd-core/CVE-2026-28338/
PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages |...
CVE-2026-28338 PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages: PMD's vbhtml and yahtml report formats insert...