Security Advisory: Reflected XSS vulnerability in Slim >= 4.4.0, <= 4.15.1 (CVE-2026-48157)
A security issue has recently been reported in Slim’s HTML error renderer that could allow reflected cross-site scripting (XSS) attacks in applications that feed untrusted data into HttpException::setTitle() and/or setDescription().