CVE-2024-7008

Impact

Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/kovidgoyal/calibre/commit/863abac24e7bc3e5ca0b3307362ff1953ba53fe0
• https://starlabs.sg/advisories/24/24-7008/