Cross-Site Scripting (XSS)

miniflux.app is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to a lack of sanitizing the proxy handler in proxy.go which allows an attacker to inject and execute malicious JavaScript into the browser...

Cross-site Scripting (XSS)

miniflux.app is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the mediaProxy function of proxy.go due to the unescaped ServerError in proxy handler when opening a broken image, allowing an attacker to inject and execute malicious javascript...