Skip to content
OpenAdvisories

Vendor

OzzieIsaacs

1 known vulnerabilities.

Products

calibreweb 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2021-25964

    Stored Cross-Site Scripting (XSS) in Calibre-web via Description Field in Metadata

    In “Calibre-web” application, v0.6.0 to v0.6.12, are vulnerable to Stored XSS in “Metadata”. An attacker that has access to edit the metadata information, can inject JavaScript payload in the description field. When a victim tries to open the file, XSS will b…

    OzzieIsaacs calibreweb