Skip to content
OpenAdvisories

Vendor

lissy93

5 known vulnerabilities.

Products

dashy 4 web-check 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-54443

    Dashy: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

    Dashy is a self-hostable personal dashboard. From 1.9.4 until 3.2.0, the Dashy RSS Widget in src/components/Widgets/RssFeed.vue does not sanitize RSS item link values before rendering feed item titles and Read More links as anchor href attributes, allowing an…

    lissy93 dashy
  • Medium 4.3
    CVE-2023-5916

    Lissy93 Dashy Configuration save access control

    A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /config-manager/save of the component Configuration Handler. The manipulation of the argument config leads to improper access controls. It i…

    lissy93 dashy