Lichess

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Lichess records in CISA KEV

No Lichess vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lila 2 records MEDIUM Powertip.ts 1 record MEDIUM

Records

1 record in Powertip.ts · all components

TI-2025-30423 CVE-2025-48051 · GHSA-chv9-fg26-xg8h

Cross-site scripting in Lichess Lila

MEDIUM 60

powertip.ts in Lila (for Lichess) before ab0beaf allows XSS in some applications because of an innerHTML usage pattern in which text is extracted from a DOM node and interpreted as HTML.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00439 Published 2025-05-15 Fixed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0