PT-2023-20510 · Unknown · Github.Com/Xyproto/Algernon/Themes +1

Name of the Vulnerable Software and Affected Versions: github.com/xyproto/algernon/engine affected versions not specified github.com/xyproto/algernon/themes affected versions not specified Description: The issue is related to Cross-site Scripting XSS due to improper user input sanitization in the...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possible when a file/resource is not found. PoC bash go install...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possible when a file/resource is not found. PoC bash go install...