9Ara
CVE-2023-6646 | linkding 1.23.0 q cross site scripting
A vulnerability classified as problematic has been found in linkding 1.23.0. Affected is an unknown function. The manipulation of the argument q leads to cross site scripting. This vulnerability is traded as CVE-2023-6646. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early, responded in a very professional manner and immediately released a fixed version of the affected product. It is recommended to upgrade the affected component.