Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-31779
5.4
MEDIUMCVSS v3
Published
May 22, 2023
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
Wekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user privilege on kanban board can insert JavaScript code in in "Reaction to comment" feature.
wekan/wekan
GitHubThe Open Source kanban, built with Meteor. GitHub issues/PRs are only for FLOSS Developers, not for support, support is at https://wekan.fi/commercial-support/ . New English strings for new features at imports/i18n/data/en.i18n.json . Non-English translations at https://app.transifex.com/wekan/wekan only.
GitHubThe Open Source kanban, built with Meteor. GitHub issues/PRs are only for FLOSS Developers, not for support, support is at https://wekan.fi/commercial-support/ . New English strings for new features at imports/i18n/data/en.i18n.json . Non-English translations at https://app.transifex.com/wekan/wekan only.<= 6.84NVD
Docker Hub