Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/24 8:43 p.m.17 views

wlc: print_html outputs API data without HTML escaping

Impact The HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting when the output is rendered in a browser. Patches https://github.com/WeblateOrg/wlc/pull/1327 Workarounds The only vulnerable code path is HTML output which is opt-in. Reference...

5.1CVSS4.9AI score0.00174EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder