CVE-2024-41349

unmark 1.9.2 is vulnerable to Cross Site Scripting (XSS) via application/views/marks/add_by_url.php.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2024-08-29

Last modified

2026-01-26

Weaknesses

CWE-79

Affected products

• Unmark (Unmark)

References

• https://github.com/cdevroe/unmark/commit/52342dc4a908dc6ac6878f21a5850108ac84a4b8
• https://github.com/cdevroe/unmark/issues/290