Medium · 4.6 CVE-2023-0736 EUVD-2023-0617GHSA-3x2c-87cq-qx49

Cross-site Scripting (XSS) - Stored in wallabag/wallabag

Published Feb 7, 2023 · Updated Mar 25, 2025 · Assigned by @huntrdev

Description

Cross-site Scripting (XSS) - Stored in GitHub repository wallabag/wallabag prior to 2.5.4.

Vendor	Product	Affected	Fixed
wallabag	wallabag/wallabag	unspecified – < 2.5.4	2.5.4

Ecosystem	Package	Affected	Fixed	Record
Packagist	wallabag/wallabag	< 2.5.4	2.5.4	GHSA-3x2c-87cq-qx49