Security Advisory

CVE-2022-24710

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-02-25 20:50:11

Last updated 2025-04-23 19:00:28

Assigner GitHub_M

State PUBLISHED

Description

Weblate is a copyleft software web-based continuous localization system. Versions prior to 4.11 do not properly neutralize user input used in user name and language fields. Due to this improper neutralization it is possible to perform cross-site scripting via these fields. The issues were fixed in the 4.11 release. Users unable to upgrade are advised to add their own neutralize logic.

← Browse all CVEs View on cve.org ↗