CVE-2025-53941 – Hollo ActivityPub HTML Injection Vulnerability

CVE ID : CVE-2025-53941

Published : July 17, 2025, 2:15 p.m. | 25 minutes ago

Description : Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Versions prior to 0.6.5 allow HTML form elements to be submitted, making the software vulnerable to HTML injection. Version 0.6.5 fixes the issue.

Severity: 6.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…