CVE-2023-26491

RSSHub is an open source and extensible RSS feed generator. When the URL parameters contain certain special characters, it returns an error page that does not properly handle XSS vulnerabilities, allowing for the execution of arbitrary JavaScript code. Users who access the deliberately constructed URL are affected. This vulnerability was fixed in version c910c4d28717fb860fbe064736641f379fab2c91. Please upgrade to this or a later version, there are no known workarounds.

• CWE-79

• https://github.com/DIYgod/RSSHub/commit/c910c4d28717fb860fbe064736641f379fab2c91Patch
• https://github.com/DIYgod/RSSHub/security/advisories/GHSA-32gr-4cq6-5w5qPatch, Vendor Advisory
• https://github.com/DIYgod/RSSHub/commit/c910c4d28717fb860fbe064736641f379fab2c91Patch
• https://github.com/DIYgod/RSSHub/security/advisories/GHSA-32gr-4cq6-5w5qPatch, Vendor Advisory

Published

Mar 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26486Vega is a visualization grammar, a declarative format for cr…6.1
• CVE-2023-26487Vega is a visualization grammar, a declarative format for cr…6.1
• CVE-2023-26488OpenZeppelin Contracts is a library for secure smart contrac…6.5
• CVE-2023-26489wasmtime is a fast and secure runtime for WebAssembly. In af…9.9
• CVE-2023-2649A vulnerability was found in Tenda AC23 16.03.07.45_cn. It h…8.8
• CVE-2023-26490mailcow is a dockerized email package, with multiple contain…8.8
• CVE-2023-26492Directus is a real-time API and App dashboard for managing S…7.5
• CVE-2023-26493Cocos Engine is an open-source framework for building 2D & 3…8.8
• CVE-2023-26494lorawan-stack is an open source LoRaWAN network server. Prio…6.1
• CVE-2023-26495An issue was discovered in Open Design Alliance Drawings SDK…7.8
• CVE-2023-26496An issue was discovered in Samsung Baseband Modem Chipset fo…9.8
• CVE-2023-26497An issue was discovered in Samsung Baseband Modem Chipset fo…9.8