PT-2025-20294 · Unknown · Koillection

Name of the Vulnerable Software and Affected Versions: Koillection version 1.6.10 Description: A Cross Site Scripting issue allows a remote attacker to escalate privileges via the collection, Wishlist, and album components. Recommendations: For Koillection version 1.6.10, consider restricting...

CVE-2025-29746

Cross Site Scripting vulnerability in Koillection v.1.6.10 allows a remote attacker to escalate privileges via the collection, Wishlist and album components...

CVE-2025-29746

Cross Site Scripting vulnerability in Koillection v.1.6.10 allows a remote attacker to escalate privileges via the collection, Wishlist and album components...

CVE-2025-29746

CVE-2025-29746 is a Cross Site Scripting (XSS) vulnerability in Koillection v1.6.10 that enables a remote attacker to escalate privileges through the collection, Wishlist, and album components. The vulnerability is documented across multiple sources (Red Hat, OSV, GitHub advisories, Snyk) with re...

Koillection 安全漏洞

Koillection is a self-hosted service by Benjamin Jonard Personal Developer that allows users to manage any type of collection. A security vulnerability exists in Koillection version 1.6.10, which stems from cross-site scripting and could lead to elevation of privilege...