Lucene search

K
osvGoogleOSV:PYSEC-2021-340
HistoryAug 16, 2021 - 6:15 p.m.

PYSEC-2021-340

2021-08-1618:15:00
Google
osv.dev
11
cross site scripting
lin-cms-flask
remote code execution

EPSS

0.001

Percentile

48.6%

Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the ‘Username’ parameter of the in component ‘app/api/cms/user.py’.

EPSS

0.001

Percentile

48.6%

Related for OSV:PYSEC-2021-340