Cross Site Scripting vulnerability in Koillection v.1.6.10 allows a remote attacker to escalate privileges via the collection, Wishlist and album components
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gist.github.com/unklerunkle/73e2ab58d1a5b9129be5de55765ea4fe | Exploit Third Party Advisory |
| https://github.com/benjaminjonard/koillection/issues/1329 | Exploit Issue Tracking Third Party Advisory |
| https://github.com/benjaminjonard/koillection/issues/1329 | Exploit Issue Tracking Third Party Advisory |
Configurations
History
16 Jun 2025, 19:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gist.github.com/unklerunkle/73e2ab58d1a5b9129be5de55765ea4fe - Exploit, Third Party Advisory | |
| References | () https://github.com/benjaminjonard/koillection/issues/1329 - Exploit, Issue Tracking, Third Party Advisory | |
| CPE | cpe:2.3:a:benjaminjonard:koillection:1.6.10:*:*:*:*:*:*:* | |
| First Time |
Benjaminjonard koillection
Benjaminjonard |
07 May 2025, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-07 19:16
Updated : 2025-06-16 19:37
NVD link : CVE-2025-29746
Mitre link : CVE-2025-29746
JSON object : View
Products Affected
benjaminjonard
- koillection
CWE
No CWE.