Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-23213

Tandoor Recipes - Stored XSS through Unrestricted File Upload

Description

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The file upload feature allows to upload arbitrary files, including html and svg. Both can contain malicious content (XSS Payloads). This vulnerability is fixed in 1.5.28.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TandoorRecipes recipes

  • < 1.5.28affected

References