1 matches found
CVE-2021-32670: Improper Neutralization of Input During Web Page Generation
Datasette is an open source multi-tool for exploring and publishing data. The ?trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting vulnerability. This vulnerability is particularly relevant if your Datasette installation...
7.2CVSS5.8AI score0.0096EPSS
SaveExploits0References2
20