Threats affecting pkg:golang/WriteFreely

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-126498Musing Studio WriteFreely · Cross-site Scripting Medium5.12026-11-11CVE Database V5CVE-2026-126498 WriteFreely versions before 0.17.3 contain a stored cross-site scripting (XSS) vulnerability. Authenticated authors can inject malicious HTML via the post slug in the CreatePost API. This injected script executes in RSS/Atom feed readers, newsletter recipients, and ActivityPub viewers. The vulnerability is fixed in version 0.17.3. Vulnerability	CVE Database V5	2026-11-11

Page 1 of 1