Security: WesternFriend/westernfriend.org
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Stored XSS via unescaped JSON-LD on contact pagesGHSA-qx5v-46hh-f23q published
Sep 26, 2026 by brylieHigh -
Bookstore orders marked paid without verifying PayPal capture status or amountGHSA-25fp-c7cf-mhc2 published
Sep 26, 2026 by brylieHigh
Learn more about advisories related to WesternFriend/westernfriend.org in the GitHub Advisory Database