TI-2026-19203 CVE-2026-23840
Movary vulnerable to Cross-site Scripting with `?categoryDeleted=` param
Priority HIGH 75
Movary is a web application to track, rate and explore your movie watch history.
leepeuker
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
leepeuker records in CISA KEVNo leepeuker vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2026-19202 CVE-2026-23839
Movary vulnerable to Cross-site Scripting with `?categoryUpdated=` param
Priority HIGH 75
Movary is a web application to track, rate and explore your movie watch history.
TI-2026-29125 CVE-2026-40350
Incorrect authorization in leepeuker movary
Priority HIGH 73
Movary is a self hosted web app to track and rate a user's watched movies.
TI-2026-29124 CVE-2026-40349
Authenticated Movary User Can Self-Escalate to Administrator via PUT /settings/users/{userId} by Setting isAdmin=true
Priority HIGH 73
Movary is a self hosted web app to track and rate a user's watched movies.
TI-2026-29123 CVE-2026-40348
Movary has Authenticated SSRF via Jellyfin Server URL Verification that Allows Internal Network Probing
Priority HIGH 67
Movary is a self hosted web app to track and rate a user's watched movies.
TI-2025-39567 CVE-2025-64116
Movary vulnerable to an open redirect
Priority MEDIUM 56
Movary is a web application to track, rate and explore your movie watch history.
TI-2026-19204 CVE-2026-23841
Movary vulnerable to Cross-site Scripting with `?categoryCreated=` param
Priority MEDIUM 42
Movary is a web application to track, rate and explore your movie watch history.
Priority LOW 23
Movary is a web application to track, rate and explore your movie watch history.