Cross site scripting

2019-03-1409:29:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

JSON

In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comments.html.

CPENameOperatorVersion
blog_minieq1.0

CPE	Name	Operator	Version
	blog_mini	eq	1.0

References

github.com/xpleaf/Blog_mini/issues/43