Skip to content
OpenAdvisories

Vendor

koush

2 known vulnerabilities.

Products

scrypted 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-47620

    Scrypted reflected Cross-site Scripting vulnerability

    Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability exists in the plugin-http.ts file via the `owner' and 'pkg` parameters. An attacker can run arbitrary JavaScript code.

    koush scrypted @scrypted/server npm
  • Medium 6.1
    CVE-2023-47623

    Scrypted reflected Cross-site Scripting vulnerability

    Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability exists in the login page via the `redirect_uri` parameter. By specifying a url with the javascript scheme (`javascript:`…

    koush scrypted @scrypted/core npm