A vulnerability classified as problematic has been found in linkding 1.23.0. Affected is an unknown function. The manipulation of the argument q leads to cross site scripting.
This vulnerability is traded as CVE-2023-6646. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
The vendor was contacted early, responded in a very professional manner and immediately released a fixed version of the affected product.
It is recommended to upgrade the affected component.
