CVE-2025-5352

CVE-2025-5352 A stored Cross-Site Scripting XSS vulnerability has been identified in the Analytics component of lunary-ai/lunary. The issue arises because the NEXTPUBLICCUSTOMSCRIPT variable is injected directly into the DOM using dangerouslySetInnerHTML without proper sanitization or validation...