CVE-2025-52842

Laundry 2.3.0 - Account Takeover via Reflected XSS PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Laundry on Linux, MacOS allows Account Takeover. This issue affects Laundry: 2.3.0.

Affected (CNA)

Vendor / product	Versions
Laundry / Laundry	affected 2.3.0

CWE

CWE-79

References

https://fluidattacks.com/advisories/winehouse
https://github.com/mohaiminur/laundry

ADP enrichment

CISA-ADP

No English description supplied.

https://fluidattacks.com/advisories/winehouse