7 matches found
CVE-2023-45908
Homarr before v0.14.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Notebook widget...
CVE-2023-45908
Homarr before v0.14.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Notebook widget...
CVE-2023-45908
creationtimestamp| type| source ---|---|--- 2025-01-21 19:19:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113867959639992774 2025-01-21 20:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbo7qib2d2p 2025-01-21 20:44:54+00:00| seen|...
CVE-2023-45908
The Homarr customizable browser homepage (versions prior to v0.14.0 ) is vulnerable to a stored cross-site scripting (XSS) vulnerability. The flaw exists within the Notebook widget , where improper neutralization of input during web page generation allows for malicious script execution. To remedi...
CVE-2023-45908
Homarr before v0.14.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Notebook widget...