Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/09/30 12:45 a.m.5 views

CVE-2025-56795

Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting XSS in the recipe creation functionality. Unsanitized user input in the "note" and "text" fields of the "/api/recipes/recipename" endpoint is rendered in the frontend without proper escaping leading to persistent XSS...

9CVSS5.5AI score0.00055EPSS
Exploits2References1
NVD
NVD
added 2025/09/29 5:15 p.m.4 views

CVE-2025-56795

Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting XSS in the recipe creation functionality. Unsanitized user input in the "note" and "text" fields of the "/api/recipes/recipename" endpoint is rendered in the frontend without proper escaping leading to persistent XSS...

9CVSS0.00055EPSS
Exploits2References3
OSV
OSV
added 2025/09/29 5:15 p.m.2 views

CVE-2025-56795

Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting XSS in the recipe creation functionality. Unsanitized user input in the "note" and "text" fields of the "/api/recipes/recipename" endpoint is rendered in the frontend without proper escaping leading to persistent XSS...

9CVSS5.6AI score0.00055EPSS
Exploits2References3
CVE
CVE
added 2025/09/29 12:0 a.m.10 views

CVE-2025-56795

CVE-2025-56795 affects Mealie 3.0.1 and earlier, with a stored XSS in the recipe creation feature. Unsanitized input in the note/text fields of the path “/api/recipes/{recipe_name}” is rendered in the frontend without proper escaping, causing persistent XSS. Root cause: lack of input sanitization...

9CVSS5.1AI score0.00055EPSS
Exploits2References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/29 12:0 a.m.3 views

PT-2025-39839

Name of the Vulnerable Software and Affected Versions Mealie versions prior to 3.0.1 Description The software is susceptible to Cross-Site Scripting XSS within the recipe creation feature. User-provided data in the "note" and "text" fields is not adequately sanitized before being displayed on the...

9CVSS5.7AI score0.00055EPSS
Exploits2References9
Cvelist
Cvelist
added 2025/09/29 12:0 a.m.6 views

CVE-2025-56795

Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting XSS in the recipe creation functionality. Unsanitized user input in the "note" and "text" fields of the "/api/recipes/recipename" endpoint is rendered in the frontend without proper escaping leading to persistent XSS...

0.00055EPSS
Exploits2References3
GithubExploit
GithubExploit
added 2025/09/26 5:6 p.m.343 views

Exploit for CVE-2025-56795

CVE-2025-56795 Description Two stored Cross-Site Scripti...

6AI score0.00055EPSS
Exploits2
0day.today
0day.today
added 2010/07/10 12:0 a.m.31 views

Joomla Rapid Recipe Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================ Joomla Rapid Recipe Persistent XSS Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

7.1AI score
Exploits0
Rows per page
Query Builder