Skip to content
OpenAdvisories

Package · Ubuntu

buku

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    buku 5.0 through 5.1.1 Stored XSS via bukuserver Bookmark List URL

    buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that allows attackers to execute script via an unescaped bookmark URL in BookmarkModelView._list_entry(). Attackers can submit a URL containing a doubl…