Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-57386
6.1
MEDIUMCVSS v3
Published
January 23, 2025
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Cross Site Scripting vulnerability in Wallos v.2.41.0 allows a remote attacker to execute arbitrary code via the profile picture function.
ellite/Wallos
GitHubWallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.
GitHubWallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.= 2.41.0NVD
Docker Hub