Skip to content
OpenAdvisories

Vendor

HabitRPG

4 known vulnerabilities.

Products

habatica 3 habitica 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.0
    CVE-2024-53274

    GHSL-2024-111: Reflected XSS in /home in habitica

    Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `register` function in `home.vue` containsa reflected XSS vulnerability due to an incorrect sanitization function. An attacker ca…

    HabitRPG habatica