medium6.3
CVE-2023-25811
Uptime Kuma is a self-hosted monitoring tool.
Impact
Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma `name` parameter allows a persistent XSS attack. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Uptime-Kuma Project | Uptime-Kuma | before 1.20.0 |