Lucene search
+L

16 matches found

PyPA
PyPA
•added 2026/07/13 2:36 p.m.•35 views

Home Assistant has stored XSS in Map-card through malicious device name

SummaryAn authenticated party can add a malicious name to their device entity, allowing for Cross-Site Scripting attacks against anyone who can see a dashboard with a Map-card which includes that entity. It requires that the victim hovers over an information point The lines or the dots representi...

8.8CVSS6.2AI score0.00282EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder