Lucene search
K

6 matches found

NVD
NVD
added 2025/09/25 3:16 p.m.1 views

CVE-2025-59838

Monkeytype is a minimalistic and customizable typing test. In versions 25.36.0 and prior, improper handling of user input when loading a saved custom text results in XSS. This issue has been fixed in version 25.44.0...

5.4CVSS0.00026EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/09/25 2:52 p.m.1 views

CVE-2025-59838 Monkeytype Vulnerable to Self-XSS on loading saved custom text

Monkeytype is a minimalistic and customizable typing test. In versions 25.36.0 and prior, improper handling of user input when loading a saved custom text results in XSS. This issue has been fixed in version 25.44.0...

2.4CVSS6.4AI score0.00026EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/09/25 2:52 p.m.4 views

CVE-2025-59838 Monkeytype Vulnerable to Self-XSS on loading saved custom text

Monkeytype is a minimalistic and customizable typing test. In versions 25.36.0 and prior, improper handling of user input when loading a saved custom text results in XSS. This issue has been fixed in version 25.44.0...

2.4CVSS0.00026EPSS
Exploits1References3
OSV
OSV
added 2025/09/25 2:52 p.m.2 views

CVE-2025-59838 Monkeytype Vulnerable to Self-XSS on loading saved custom text

Monkeytype is a minimalistic and customizable typing test. In versions 25.36.0 and prior, improper handling of user input when loading a saved custom text results in XSS. This issue has been fixed in version 25.44.0...

2.4CVSS6.8AI score0.00026EPSS
Exploits1References5
CVE
CVE
added 2025/09/25 2:52 p.m.9 views

CVE-2025-59838

CVE-2025-59838 describes a self-XSS vulnerability in Monkeytype prior to version 25.44.0, triggered by improper handling of user input when loading a saved custom text. The issue affects Monkeytype versions up to 25.36.0, where loading saved text could execute unintended scripts. The fixed versio...

5.4CVSS6.4AI score0.00026EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2025/09/25 12:0 a.m.1 views

Monkeytype 安全漏洞

Monkeytype is a minimalist and customizable typing test open-sourced by Monkeytype. A security vulnerability exists in Monkeytype 25.36.0 and earlier versions, which stems from improper handling of user input when loading saved customized text, and could lead to cross-site scripting attacks...

5.4CVSS5.9AI score0.00026EPSS
Exploits1References4
Rows per page
Query Builder