Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/31 12:00 a.m.•1 views

CVE-2023-26131: Improper Neutralization of Input During Web Page Generation

All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possibl...

6.1CVSS6AI score0.00691EPSS
SaveExploits1References4
Rows per page
Query Builder