CNNVD-202601-3014 Information

CNNVD ID

CNNVD-202601-3014

CVE-2026-23841

  • CNNVD Published: 2026-01-19

Description (Chinese)

Movary是Lee Peuker个人开发者的一个影评程序。 Movary 0.70.0之前版本存在跨站脚本漏洞,该漏洞源于对categoryCreated参数输入验证不足,可能导致跨站脚本攻击。

Description (English)

Movary is a film evaluation program for Lee Peuker’s personal developer. The pre-Movary 0.70.0 version had a cross-site script loophole, which stemmed from inadequate validation of input into the categoryCreated parameters, which could lead to cross-site script attacks.

Hazard Level

Low

Vulnerability Type

跨站脚本

Affected Vendor

个人开发者

Published

2026-01-19

Last Modified

2026-02-24

References

https://github.com/leepeuker/movary/releases/tag/0.70.0 https://github.com/leepeuker/movary/security/advisories/GHSA-v877-x568-4v5v https://access.redhat.com/security/cve/cve-2026-23841

Patch

https://github.com/leepeuker/movary/releases

Share on: