Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-25807 EUVD-2024-23115GHSA-wpwv-j45h-pwcg

Cross Site Scripting (XSS) vulnerability in Lychee 3.1.6, allows remote attackers to execute arbitrary code and obtain sensitive informatio…

Published Mar 22, 2024 · Updated Aug 1, 2024 · Assigned by mitre

Description

Cross Site Scripting (XSS) vulnerability in Lychee 3.1.6, allows remote attackers to execute arbitrary code and obtain sensitive information via the title parameter when creating an album.

References