Skip to content
OpenAdvisories

Archive

19 July 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2024-39123 Public exploit EPSS 23%

    Calibre-Web Cross Site Scripting (XSS)

    In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due to improper sanitization performed by the clean_string function. The vulnerability arises from the way the clean_string function handles H…