CVE-2025-65858

Calibre-Web v0.6.25 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. The issue occurs because the application fails to sanitize the 'username' field during the user creation process. An attacker can inject malicious JavaScript which is stored in the database and subsequently e...