CVE-2024-39123

{"id": "CVE-2024-39123", "cveTags": [], "metrics": {}, "published": "2024-07-19T20:15:07.797", "references": [{"url": "https://github.com/pentesttoolscom/vulnerability-research/tree/master/CVE-2024-39123", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due to improper sanitization performed by the clean_string function. The vulnerability arises from the way the clean_string function handles HTML sanitization."}, {"lang": "es", "value": " En janeczku Calibre-Web 0.6.0 a 0.6.21, la funci\u00f3n edit_book_comments es vulnerable a Cross Site Scripting (XSS) debido a una sanitizaci\u00f3n inadecuada realizada por la funci\u00f3n clean_string. La vulnerabilidad surge de la forma en que la funci\u00f3n clean_string maneja la sanitizaci\u00f3n de HTML."}], "lastModified": "2024-07-22T13:00:53.287", "sourceIdentifier": "cve@mitre.org"}