CVE-2024-22776

Wallos version 0.9 , an open-source personal subscription tracker, is vulnerable to Cross-Site Scripting (XSS) . The root cause is a lack of proper validation in all text-based input fields, though fields requiring specific formats (such as date fields) are reportedly unaffected. An attacker coul...