Algernon Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Algernon Project records in CISA KEV

No Algernon Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Algernon 2 records MEDIUM

Records

2 records in Algernon · all components

TI-2025-40435 CVE-2025-65754 · GHSA-8jqm-8qm3-qgqm

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute…

MEDIUM 60

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0044 Published 2025-12-10 Fixed in 1.17.5 CWE-79

TI-2023-11355 CVE-2023-26131 · GHSA-g47h-fgcw-g4ph

Cross-site scripting in github.com/xyproto/algernon/engine

LOW 28

All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting (XSS) via the themes.NoPage(filename, theme) function…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00691 Published 2023-05-31 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0