Filtered by vendor Gnome Subscriptions
Filtered by product Gi-docgen Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-11687 1 Gnome 1 Gi-docgen 2026-01-27 6.1 Medium
A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page — enabling DOM access, session cookie theft and other client-side attacks — via a crafted URL that supplies a malicious value to the q GET parameter (reflected DOM XSS).