Recipes Cross-Site Scripting Vulnerability (CNVD-2022-58300)

Recipes is an application for managing recipes, planning meals, building shopping lists, etc. A cross-site scripting vulnerability exists in Recipes versions 0.17.0 through 1.2.5, which stems from a vulnerability in the “Name” field of the keyword, food and unit components to store cross-site scripting (XSS). attacks. An attacker could exploit the vulnerability to obtain the victim’s API key and potentially cause the administrator’s account to take over.