{"id":"CVE-2026-121627","title":"buku 5.0 through 5.1.1 Stored XSS via bukuserver Bookmark List URL","summary":"buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that allows attackers to execute script via an unescaped bookmark URL in BookmarkModelView._list_entry(). Attackers can submit a …","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvssSource":"cna","cwe":["CWE-79"],"vendor":"jarun","product":"buku","affected":["buku >= 5.0 <= 5.1.1"],"published":"2026-11-03","updated":"2026-11-03","sourceUpdated":"2026-11-03T17:13:53.952Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-121627","references":[{"url":"https://github.com/jarun/buku/issues/911","label":"GitHub Issue #911"},{"url":"https://github.com/jarun/buku/blob/v5.1.1/bukuserver/views.py#L133"},{"url":"https://github.com/jarun/buku"},{"url":"https://www.vulncheck.com/advisories/buku-5.0-through-5.1.1-stored-xss-via-bukuserver-bookmark-list-url","label":"VulnCheck Advisory: buku 5.0 through 5.1.1 Stored XSS via bukuserver Bookmark List URL"}],"tags":["cve.org"],"epss":0.00194,"epssPercentile":0.09173,"ingestedAt":"2026-11-05T20:33:06.308Z","slug":"CVE-2026-121627","body":"## Overview\n\nbuku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that allows attackers to execute script via an unescaped bookmark URL in BookmarkModelView._list_entry(). Attackers can submit a URL containing a double quote and event handler through the unauthenticated /api/bookmarks endpoint to issue same-origin API requests with viewers' credentials.\n\n## Affected\n\n- `buku >= 5.0 <= 5.1.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":34,"depthScoreParts":{"impact":33.6,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}