Cross-Site Scripting in RansomLook Cryptocurrency Wallet by RansomLook
CVE-2026-78391

8.8HIGH

Key Information:

Vendor

Ransomlook

Status
Ransomlook
Vendor
CVE Published:
24 August 2026

What is CVE-2026-78391?

RansomLook's cryptocurrency wallet demonstrates a stored cross-site scripting vulnerability in its wallet detail view. It improperly stores cryptocurrency addresses and blockchain information sourced from external inputs without adequate validation, leading to potential JavaScript execution in the user's browser. Attackers could exploit this vulnerability by injecting malicious wallet records into publicly sourced data, which might not require user authentication to execute arbitrary JavaScript when interacting with the wallet. The proposed mitigation includes robust validation of cryptocurrency identifiers and transitioning from inline JavaScript event handlers to safer data-* attributes, effectively separating data from executable code.

Affected Version(s)

ransomlook 0 <= 2.0.0

References

https://github.com/RansomLook/RansomLook/commit/7efb59253...
patch

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jeroen Pinoy
Fafner [_KeyZee_]
.