TI-2023-25011 CVE-2023-46448 · GHSA-347h-34jg-3w64Reflected Cross-Site Scripting (XSS) vulnerability in dmpop Mejiro Commit Versions Prior…Priority LOW 28Reflected Cross-Site Scripting (XSS) vulnerability in dmpop Mejiro Commit Versions Prior To 3096393 allows attackers to run arbitrary code via crafted string in metadata of uploaded images.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00463 · Published 2023-11-01 · No fix listed CWE-79