What is GHSA-p2jj-7m4x-3gfh?

GHSA-p2jj-7m4x-3gfh is a security advisory published by GitHub Security Advisories with Medium severity. Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML...

Which CVE IDs does GHSA-p2jj-7m4x-3gfh cover?

GHSA-p2jj-7m4x-3gfh covers the following CVE IDs: CVE-2026-18311. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p2jj-7m4x-3gfh?

GHSA-p2jj-7m4x-3gfh has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-p2jj-7m4x-3gfhMediumCVSS 6.1

Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML...

Vendor

GitHub Security Advisories

Published

September 25, 2026

Last Modified

September 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-18311 →

📋 Description

Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML sanitization in its processing of imported document metadata. Attacker-controlled fields such as the author meta tag are inserted into a WebView via innerHTML, enabling stored XSS that executes on synced devices when the malicious document is opened.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-18311
https://kb.cert.org/vuls/id/699627
https://github.com/advisories/GHSA-p2jj-7m4x-3gfh