Lucene search
+L

3 matches found

PyPA
PyPA
•added 2026/07/13 3:46 p.m.•26 views

malla: Stored XSS via Meshtastic node names in multiple frontend pages

Node names longname, shortname received via MQTT are stored in SQLite without sanitization and rendered into the DOM without escaping.Any participant on a public Meshtastic MQTT broker can set a malicious node name that executes JavaScript in the browser of every Malla dashboard visitor.Affected...

6.3CVSS6.4AI score0.00325EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder