Cross Site Scripting vulnerability in Koillection v.1.6.10 allows a remote attacker to escalate privileges via the collection, Wishlist and album components
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00291·Published 2025-05-07·Fixed in 1.6.12CWE-79