Skip to content
OpenAdvisories

Vendor

mkucej

4 known vulnerabilities.

Products

i-librarian-free 2 mkucej/i-librarian-free 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.6
    CVE-2024-50344

    I, Librarian has a Stored XSS vulnerability in Supplemental Files

    I, Librarian is an open-source version of a PDF managing SaaS. Supplemental Files are allowed to be viewed in the browser, only if they have a white-listed MIME type. Unfortunately, this logic is broken, thus allowing unsafe files containing Javascript to be …

    mkucej i-librarian-free
  • Medium 4.6
    CVE-2024-41943

    I, Librarian Stored XSS vulnerability in Item Summary

    I, Librarian is an open-source version of a PDF managing SaaS. PDF notes are displayed on the Item Summary page without any form of validation or sanitation. An attacker can exploit this vulnerability by inserting a payload in the PDF notes that contains mali…

    mkucej i-librarian-free
  • Medium 4.1
    CVE-2023-3021

    Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free

    Cross-site Scripting (XSS) - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4.

    mkucej mkucej/i-librarian-free