Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/28 4:54 p.m.40 views

CVE-2026-45323 MeshCore Card: XSS vulnerability through meshcore node name

MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect repeated radio range to execute arbitrary javascript in the Home Assistant frontend of anyone...

9.6CVSS0.00317EPSS
SaveExploits1References1
Rows per page
Query Builder