-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| calibreweb | pip | < 0.6.15 | 0.6.15 |
Miggo AIRoot Cause AnalysisThe patch modifies the event handlers for #btn-upload-format and #btn-upload-cover change events to prevent XSS by using .text() instead of .html(). This indicates the code within these event handlers was vulnerable. Since these are anonymous functions, they don't have a specific name, but they are the primary points of vulnerability.
cps/static/js/edit_books.js
Ongoing coverage of React2Shell