CNNVD-202601-3008 Information
Jan 19, 2026
cve
CNNVD ID
CNNVD-202601-3008
Related CVE
- CNNVD Published: 2026-01-19
Description (Chinese)
Movary是Lee Peuker个人开发者的一个影评程序。 Movary 0.70.0之前版本存在跨站脚本漏洞，该漏洞源于对categoryDeleted参数输入验证不足，可能导致跨站脚本攻击。
Description (English)
Movary is a film evaluation program for Lee Peuker’s personal developer. The pre-Movary 0.70.0 version had a cross-site script loophole, which stemmed from inadequate validation of the category Delleted parameters and could lead to cross-site script attacks.
Hazard Level
Low
Vulnerability Type
跨站脚本
Affected Vendor
个人开发者
Published
2026-01-19
Last Modified
2026-02-24
References
https://github.com/leepeuker/movary/blob/main/public/js/settings-account-location.js#L204 https://github.com/leepeuker/movary/releases/tag/0.70.0 https://github.com/leepeuker/movary/security/advisories/GHSA-pj3m-gmq8-2r57 https://access.redhat.com/security/cve/cve-2026-23840
Patch
https://github.com/leepeuker/movary/releases
Share on: