Vulnerabilities in wallabag
11 resultsCVE-2023-0609MEDIUMImproper Authorization in wallabag/wallabagEPSS 0.6%CVE-2026-82089HIGHThe wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a EPSS 0.5%CVE-2023-0734HIGHImproper Authorization in wallabag/wallabagEPSS 0.5%CVE-2023-0610MEDIUMImproper Authorization in wallabag/wallabagEPSS 0.4%CVE-2023-0736MEDIUMCross-site Scripting (XSS) - Stored in wallabag/wallabagEPSS 0.4%CVE-2023-0737MEDIUMCSRF in wallabag/wallabagEPSS 0.3%CVE-2023-4455MEDIUMCross-Site Request Forgery (CSRF) in wallabag/wallabagEPSS 0.3%CVE-2023-0735MEDIUMCross-Site Request Forgery (CSRF) in wallabag/wallabagEPSS 0.3%CVE-2026-110228MEDIUMwallabag 2.6.13 through 2.6.14 Stored XSS via Failed HTML Import UploadEPSS 0.3%CVE-2023-4454MEDIUMCross-Site Request Forgery (CSRF) in wallabag/wallabagEPSS 0.3%CVE-2026-82081MEDIUMwallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export.EPSS 0.2%