Threats tagged 'ghsa-jx74-jhpj-pc7p'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-121627buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that Medium5.32026-11-03GCVE DatabaseCVE-2026-121627 Buku versions 5.0 through 5.1.1 have a stored cross-site scripting (XSS) vulnerability in the bukuserver bookmark list. This flaw allows attackers to inject malicious scripts via an unescaped bookmark URL submitted through the unauthenticated /api/bookmarks endpoint. Exploitation can lead to same-origin API requests executed with the viewer's credentials. Report on CVE-2026-121627 Vulnerability CWE-79 #ghsa-jx74-jhpj-pc7p	GCVE Database	2026-11-03

Page 1 of 1