Lucene search

K

Whoogle-Search Security Vulnerabilities

cve
cve

CVE-2022-25303

The package whoogle-search before 0.7.2 are vulnerable to Cross-site Scripting (XSS) via the query string parameter q. In the case where it does not contain the http string, it is used to build the error_message that is then rendered in the error.html template, using the flask.render_template funct...

6.1CVSS

5.9AI Score

0.001EPSS

2022-07-12 03:15 PM
51
8