CNNVD-202509-2861 Information
Sep 18, 2025
cve
CNNVD ID
CNNVD-202509-2861
Related CVE
- CNNVD Published: 2025-09-18
Description (Chinese)
LinkAce是Kevin Woblick个人开发者的一个自托管档案库，用于收集您最喜爱的网站的链接。 LinkAce 2.3.1之前版本存在跨站脚本漏洞，该漏洞源于未正确清理用户名字段，可能导致存储型跨站脚本攻击。
Description (English)
LinkAce is a self-hosted archive of Kevin Woblick personal developers to collect links to your favorite website. The previous version of LinkAce 2.3.1 had a cross-site script loophole, which originated from an incorrect clean-up of the user’s name section and could lead to a storage-type cross-site script attack.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
个人开发者
Published
2025-09-18
Last Modified
2026-02-24
References
https://github.com/Kovah/LinkAce/security/advisories/GHSA-289g-9gff-p4wh https://github.com/Kovah/LinkAce/commit/c0d21b974b32f1ca2fab550fb476c573a068e196 https://access.redhat.com/security/cve/cve-2025-59424
Patch
https://github.com/Kovah/LinkAce/releases
Share on: