CVE-2024-7008
MEDIUM NUCLEIcalibre < 7.15.0 - Reflected Cross-Site Scripting
Title source: llmExploitation Summary
CVE-2024-7008 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.
Description
Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.
Nuclei Templates (1)
Calibre <= 7.15.0 - Reflected Cross-Site Scripting (XSS)
MEDIUMVERIFIEDby DhiyaneshDK
Shodan:
html:"Calibre"
FOFA:
Server: calibre
References (2)
Core 2
Core References
Exploit, Third Party Advisory third-party-advisory
https://starlabs.sg/advisories/24/24-7008/
Scores
CVSS v3
5.4
EPSS
0.2351
EPSS Percentile
97.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-79
Status
published
Products (1)
calibre-ebook/calibre
< 7.15.0
Published
Aug 06, 2024
Tracked Since
Feb 18, 2026