5 matches found
Label Studio < 1.18.0 - Reflected XSS Detection
Label Studio 1.18.0 contains a stored XSS caused by improper sanitization in POST /projects/upload-example/ endpoint, letting attackers inject malicious scripts to hijack sessions and perform unauthorized actions, exploit requires sending crafted requests. !/usr/bin/env python3 -- coding: utf-8 -...
7.6CVSS5.9AI score0.00596EPSS
SaveExploits2References2
20