Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-64177

ThinkDashboard: Stored XSS in Dashboard via Malicious Bookmark

Description

ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. In versions 0.6.7 and below, there is a stored Cross-Site Scripting (XSS) vulnerability in the dashboard, which can exploited when a user clicks on a malicious bookmark, made vulnerable by the lack of scheme filtering. This is fixed in version 0.6.8.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MatiasDesuu ThinkDashboard

  • < 0.6.8affected

References