https://poc.intelseclab.com/tags/next/script/Latest proof-of-concept entries.Hugoen-usSun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-beforeinteractive-script-xss/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-beforeinteractive-script-xss/Medium severity (CVSS 6.1) — web · CVE-2026-44580. Status: Weaponized. Affects: Next.js applications using next/script with strategy="beforeInteractive". Tags: XSS, next/script, beforeInteractive, Next.js, App-Router, unauthenticated.webMediumXSSnext/scriptbeforeInteractiveNext.jsApp-Routerunauthenticated