Iindieweb

Products

Exploited and recent CVEs

• CVE-2025-14893 Medium 6.4 IndieWeb <= 4.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via 'Telephone' Parameter 0.2%
• CVE-2025-12028 High 8.8 IndieAuth <= 4.5.4 - Cross-Site Request Forgery to Account Takeover via Stolen OAuth Tokens 0.2%