CVE-2023-0736
1 advisory.
Packagist/wallabag/wallabag CVE-2023-0736: medium 5.4, EPSS 0.44%
Cross-site Scripting (XSS) in wallabag/wallabag
Action: Upgrade wallabag/wallabag to 2.5.4 or later.
composer require wallabag/wallabag:2.5.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.4 | - |
Fixed versions
| 2.5.4 |
Sources
- osv: GHSA-3x2c-87cq-qx49
- https://nvd.nist.gov/vuln/detail/CVE-2023-0736
- https://github.com/wallabag/wallabag/commit/4e023bddc3622ba5e901cc14a261fcb98d955cd7
- https://github.com/wallabag/wallabag
- https://huntr.dev/bounties/7e6f9614-6a96-4295-83f0-06a240be844e
CVE-2023-0736 · published · modified · JSON