CVE-2025-22660

Name of the Vulnerable Software and Affected Versions Wolfgang Include Mastodon Feed versions n/a through 1.9.9

Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker could potentially inject malicious scripts into the website, affecting users' browsers.

Recommendations For versions n/a through 1.9.9, update to a version that includes a fix for this issue, as no specific workaround is provided for these versions. As a temporary workaround, consider restricting user input to prevent malicious scripts from being injected into the website. Avoid using the vulnerable component until a patch is available.