Security Advisory

CVE-2024-25807

6.1
MEDIUM

Vulnerability Description

Cross Site Scripting (XSS) vulnerability in Lychee 3.1.6, allows remote attackers to execute arbitrary code and obtain sensitive information via the title parameter when creating an album.
Published Date March 22, 2024
Official Source NIST NVD Advisory