A stored cross-site scripting (XSS) vulnerability has been identified in the MCP Registry Catalogue UI, specifically affecting versions prior to v1.7.7. The vulnerability resides in the "websiteUrl" field of published entries. Successful exploitation could allow malicious payloads to execute within the registry interface. AI
Summary written by gemini-2.5-flash-lite from 1 source. How we write summaries →
IMPACT Potential security risk for users interacting with the MCP Registry Catalogue UI.
RANK_REASON Identifies a specific software vulnerability (CVE) in a UI component.