Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-22776
4.7
MEDIUMCVSS v3
Published
February 23, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Wallos 0.9 is vulnerable to Cross Site Scripting (XSS) in all text-based input fields without proper validation, excluding those requiring specific formats like date fields.
ellite/Wallos
GitHubWallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.
GitHubWallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.>= 0.9, < 1.2.3NVD