26 matches found
CVE-2019-9765
In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...
CVE-2019-9765
In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...
CVE-2019-9765
In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...
CVE-2019-9765
Blog_mini 1.0 is affected by an XSS vulnerability that arises when a comment reply author name is not properly sanitized in app/main/views.py articleDetails(), with the issue referencing app/templates/_article_comments.html. This could allow injected scripts via the author name field as part of a...
CVE-2019-9765
In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...
CVE-2019-9765: Improper Neutralization of Input During Web Page Generation
In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...