CVE-2024-39123

In janeczku Calibre-Web 0.6.0 to 0.6.21, the editbookcomments function is vulnerable to Cross Site Scripting XSS due to improper sanitization performed by the cleanstring function. The vulnerability arises from the way the cleanstring function handles HTML sanitization...

CVE-2024-39123: Improper Neutralization of Input During Web Page Generation

In janeczku Calibre-Web 0.6.0 to 0.6.21, the editbookcomments function is vulnerable to Cross Site Scripting XSS due to improper sanitization performed by the cleanstring function. The vulnerability arises from the way the cleanstring function handles HTML sanitization...

CVE-2024-39123

The janeczku Calibre-Web application (versions 0.6.0 to 0.6.21 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is improper HTML sanitization within the clean_string function, specifically affecting the edit_book_comments function. An attacker with low privileges can inject a...