CVE-2024-39123

Calibre-Web 0.6.0–0.6.21 is vulnerable to Cross-Site Scripting (XSS) due to improper HTML sanitization in the clean_string function, exploitable via the edit_book_comments feature. Reports from Red Hat and OSV/OSV-GHSA entries corroborate the same root cause: inadequate sanitization leading to XS...