Skip to content
OpenAdvisories

Vendor

dolfinus

1 known vulnerabilities.

Products

3DAlloy 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2025-59332

    3DAlloy allows stored XSS through attributes provided to the 3d parser tag/function

    3DAlloy is a lightWeight 3D-viewer for MediaWiki. From 1.0 through 1.8, the <3d> parser tag and the {{#3d}} parser function allow users to provide custom attributes that are then appended to the canvas HTML element that is being output by the extension. The a…

    dolfinus 3DAlloy