CVE-2016-7282

CVE-2016-7282 is a cross-site scripting (XSS) vulnerability affecting Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge, allowing remote attackers to inject arbitrary web script or HTML. Rated as Medium severity (CVSS 6.1), it requires user interaction (UI:R) and could lead to limited confidentiality and integrity impacts. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability garnered significant community discussion and media coverage at the time of its disclosure.