Executive brief
Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.
Affected products
- PyPI calibreweb
Junglewise Threat Intelligence
CVE-2022-0352: PYSEC-2022-18 - Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.
CVE-2022-0352 · Severity: low · CVSS 3.1 · Published 2022-01-28
Technologies: calibreweb (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1234 - Calibre-Web Has a Stored Cross-Site Scripting (XSS) Vulnerability via the 'username' Field During User Creation
- PYSEC-2026-1228 - Calibre Web and Autocaliweb have a ReDoS vulnerability
- PYSEC-2026-1235 - Calibre Web and Autocaliweb have OS Command Injection vulnerability
- PYSEC-2026-1232 - Generation of Error Message Containing Sensitive Information in janeczku/calibre-web
- PYSEC-2026-1236 - Cross-site Scripting (XSS) - DOM in janeczku/calibre-web