← Database

CVE-2024-39123

MEDIUM CVSS: 5.4 Published: 2024-07-19 Modified: 2026-06-17

Description

In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due to improper sanitization performed by the clean_string function. The vulnerability arises from the way the clean_string function handles HTML sanitization.

Affected Platforms

Janeczku Calibre-Web

Weakness Type

CWE-79

References