CVE-2023-26131

Summary: CVE-2023-26131 affects the Algernon project’s engine and themes components via an XSS flaw in themes.NoPage(filename, theme) caused by improper user input sanitization when a file/resource is not found. The vulnerability is evidenced by multiple connected sources detailing the same issue...

CVE-2025-65754

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename.