← All advisories

Medium severity5.4NVD Advisory· Published Feb 7, 2023· Updated Jun 17, 2026

CVE-2023-0736

CVE-2023-0736

Description

Cross-site Scripting (XSS) - Stored in GitHub repository wallabag/wallabag prior to 2.5.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
wallabag/wallabagPackagist	< 2.5.4	2.5.4

Affected products

2

ghsa-coords
pkg:composer/wallabag/wallabag
Range: < 2.5.4
Walla Telesite/Wallabag/wallabagv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/wallabag/wallabag/commit/4e023bddc3622ba5e901cc14a261fcb98d955cd7nvdPatchWEB
huntr.dev/bounties/7e6f9614-6a96-4295-83f0-06a240be844envdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-3x2c-87cq-qx49ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-0736ghsaADVISORY

News mentions

0

No linked articles in our index yet.