CVE-2025-23213 — Tandoor Recipes - Stored XSS through Unrestricted File Upload
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The file upload feature allows to upload arbitrary files, including html and…
Published: 2025-01-28 · CVSS: 8.7 · CVSS 3.1
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The file upload feature allows to upload arbitrary files, including html and svg. Both can contain malicious content (XSS Payloads). This vulnerability is fixed in 1.5.28.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7