← Database

CVE-2026-23841

CRITICAL CVSS: 9.3 Published: 2026-01-19 Modified: 2026-06-17

Description

Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, attackers can trigger cross-site scripting payloads in versions prior to 0.70.0. The vulnerable parameter is `?categoryCreated=`. Version 0.70.0 fixes the issue.

Affected Platforms

Leepeuker Movary

Weakness Type

CWE-20, CWE-79

References