IndieWeb
indiewebVulnerabilities:
1
Last Updated:
March 28, 2026
Active Installs:
600
Published
Title
Fixed in
CVSS
Published
2026-01-08
Title
IndieWeb < 5.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'Telephone' Parameter
Fixed in
CVSS
6.4 (medium)