5.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
37.5%
In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comments.html.
github.com/xpleaf/Blog_mini/issues/43