CVE-2025-70296

A stored HTML injection vulnerability in the Recipe Notes rendering component in Mealie 3.3.1 allows remote authenticated users to inject arbitrary HTML, resulting in user interface redressing within the recipe view...

CVE-2025-70296

CVE-2025-70296 describes a stored HTML injection vulnerability in the Recipe Notes rendering component of Mealie 3.3.1. The issue allows remote authenticated users to inject arbitrary HTML, leading to user interface redressing within the recipe view. The description specifies the affected product...

Mealie 安全漏洞

Mealie is a self-hosted recipe manager and meal planner developed by Hayden from the United States. Version 3.3.1 of Mealie contains a security vulnerability, which stems from a storage-type HTML injection in the Recipe Notes rendering component, potentially leading to user interface spoofing...