Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-44264

Weblate is vulnerable to XSS via crafted Markdown

Description

Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided content didn't properly sanitize some attributes. This issue has been patched in version 5.17.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WeblateOrg weblate

  • < 5.17.1affected

References