CVE-2026-23841 - Movary vulnerable to Cross-site Scripting with `?categoryCreated=` param

CVE ID : CVE-2026-23841 Published : Jan. 19, 2026, 7:16 p.m. | 1 hour, 6 minutes ago Description : Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, attackers can trigger cross-site scripting payloads in versions prior to 0.70.0. The vulnerable parameter is `?categoryCreated=`. Version 0.70.0 fixes the issue. Severity: 9.3 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...