Vulnerability Details CVE-2026-31382
The error_description parameter is vulnerable to Reflected XSS. An attacker can bypass the domain's WAF using a Safari-specific onpagereveal payload.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 15.6%
CVSS Severity
CVSS v3 Score 6.1
References