cbcvebase.

Ozzieisaacs Calibreweb vulnerabilities

1 known vulnerability affecting ozzieisaacs/calibreweb.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2021-25964P4MEDIUMCVSS 5.4≥ 0.6.0, < unspecified≥ unspecified, ≤ 0.6.122021-10-04
CVE-2021-25964 [MEDIUM] CWE-79 CVE-2021-25964: In “Calibre-web” application, v0.6.0 to v0.6.12, are vulnerable to Stored XSS in “Metadata”. An atta In “Calibre-web” application, v0.6.0 to v0.6.12, are vulnerable to Stored XSS in “Metadata”. An attacker that has access to edit the metadata information, can inject JavaScript payload in the description field. When a victim tries to open the file, XSS will be triggered.
nvd
Ozzieisaacs Calibreweb vulnerabilities | cvebase