Skip to content
OpenAdvisories

Product · HabitRPG

habatica

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.0
    CVE-2024-53273

    GHSL-2024-110: Reflected XSS in /register in habitica

    Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `register` function in `RegisterLoginReset.vue` contains a reflected XSS vulnerability due to an incorrect sanitization function.…

    HabitRPG habatica
  • Medium 5.0
    CVE-2024-53272

    GHSL-2024-109: Reflected XSS in /login in habitica

    Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `login` and `social media` function in `RegisterLoginReset.vue` contains two reflected XSS vulnerabilities due to an incorrect sa…

    HabitRPG habatica