1 result · Feed
-
Medium 6.1
buku 5.0 through 5.1.1 Stored XSS via bukuserver Bookmark List URL
buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that allows attackers to execute script via an unescaped bookmark URL in BookmarkModelView._list_entry(). Attackers can submit a URL containing a doubl…