Beschreibung
wlc is a Weblate command-line client using Weblate-s REST API. Prior to version 2.0.0, the HTML output format in wlc embeds API response data into HTML without escaping, allowing cross-site scripting when the output is rendered in a browser. This issue has been patched in version 2.0.0.
CVSS 5.1EPSS 0.174%Risiko 0.52
Quelle öffnen- Veröffentlicht
- 2026-05-08 04:16:18
- Betroffene Versionen
- <2.0.0
- Typ
- Kritische Software
- Vektor
- CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L