Threats tagged 'ghsa-43p2-x762-x6h7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-126498WriteFreely before 0.17.3 contains a stored cross-site scripting vulnerability that allows authenticated authors to Medium5.12026-11-11GCVE DatabaseCVE-2026-126498 WriteFreely versions before 0.17.3 are affected by a stored cross-site scripting (XSS) vulnerability. Authenticated authors can exploit this flaw by injecting malicious HTML through the post slug in the CreatePost API. This injected script executes in RSS/Atom feed readers, newsletter recipients, and ActivityPub viewers, potentially compromising confidentiality and integrity. Report on CVE-2026-126498 Vulnerability CWE-79 #ghsa-43p2-x762-x6h7	GCVE Database	2026-11-11

Page 1 of 1