Unrated severityNVD Advisory· Published Nov 6, 2025· Updated Nov 6, 2025
ThinkDashboard: Stored XSS in Dashboard via Malicious Bookmark
CVE-2025-64177
Description
ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. In versions 0.6.7 and below, there is a stored Cross-Site Scripting (XSS) vulnerability in the dashboard, which can exploited when a user clicks on a malicious bookmark, made vulnerable by the lack of scheme filtering. This is fixed in version 0.6.8.
Affected products
2- Range: <=0.6.7
- MatiasDesuu/ThinkDashboardv5Range: < 0.6.8
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/MatiasDesuu/ThinkDashboard/commit/16976263b22a4b0526b2c7c30294cc099258edaemitrex_refsource_MISC
- github.com/MatiasDesuu/ThinkDashboard/security/advisories/GHSA-57f2-rhxm-fjv3mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.