Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/26 9:3 p.m.5 views

GHSA-75MW-H36V-2JV7 Dosage Vulnerable to Stored Cross-Site Scripting (XSS) in HTML/RSS Output Handlers

Summary The HTML and RSS output handlers in dosagelib/events.py write user-controlled content comic text and page URLs directly into generated files without proper HTML escaping. When a user scrapes a malicious webcomic and opens the generated HTML/RSS file, attacker-controlled JavaScript can...

6.1CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder