Maloja error page XSS vulnerability

Impact The error page for a missing path echoes the path back to the user. If this contains HTML, an attacker could execute a script on the user's machine inside the Maloja context and perform authorized actions like scrobbling or deleting scrobbles. This does not affect the security of your...

PT-2023-32974

Name of the Vulnerable Software and Affected Versions Maloja versions prior to 3.2.2 Description The issue allows an attacker to execute a script on the user's machine inside the Maloja context, enabling them to perform authorized actions such as scrobbling or deleting scrobbles. This is a...