Archive
19 July 2024
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium 5.4
Calibre-Web Cross Site Scripting (XSS)
In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due to improper sanitization performed by the clean_string function. The vulnerability arises from the way the clean_string function handles H…