CVE-2026-126498 | Musing Studio WriteFreely up to 0.17.2 CreatePost API auth.rs augmentReadingDestination cross site scripting

A vulnerability categorized as problematic has been discovered in Musing Studio WriteFreely up to 0.17.2. The affected element is the function augmentReadingDestination of the file auth.rs of the component CreatePost API. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-126498. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More