Skip to content
OpenAdvisories

Vendor

lissy93

5 known vulnerabilities.

Products

dashy 4 web-check 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.9
    CVE-2026-55592 Scanner template

    Dashy: XSS in workspace url parameter

    Dashy is a self-hostable personal dashboard. Prior to 4.3.7, Dashy's workspace view trusts the url query parameter and assigns it directly to an iframe source without scheme validation. If a logged-in user opens a crafted workspace link containing a javascrip…

    lissy93 dashy