Launch Week Day 1: Announcing Security Design Review
Start for Free
npm

@haxtheweb/iframe-loader

View on npm registry
1 Total advisories
1 Vulnerabilities
0 Malware

Vulnerabilities

UNKNOWN
npm

CVE-2026-46396

Stored XSS via <iframe> in HAX CMS allows access to sensitive client-side data and account takeover

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes