meshcore-card vulnerabilities
1 known vulnerability in meshcore-card from Jpettitt. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score
Latest first
- 9.6 Critical severity
meshcore-card: Improper Neutralization of Input During Web Page Generation
MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect (repeated) radio range to execute arbitrary javascript in the