EUVD-2019-0062

Malware in sbrugna...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

GHSA-HJX6-F647-MVF9 Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components

Impact We have identified a Cross-Site Scripting XSS vulnerability within certain React components related to community members in the Invenio-Communities module. This vulnerability enables a user to inject a script tag into the Affiliations field during the account registration process. The...

Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components

Impact We have identified a Cross-Site Scripting XSS vulnerability within certain React components related to community members in the Invenio-Communities module. This vulnerability enables a user to inject a script tag into the Affiliations field during the account registration process. The...

PT-2024-40325

Name of the Vulnerable Software and Affected Versions Invenio-Communities versions prior to 2.8.11 Invenio-Communities versions prior to 4.2.2 Invenio-Communities versions prior to 7.8.0 Description A Cross-Site Scripting XSS issue has been identified in certain React components related to...

Cross-site Scripting (XSS)

invenio-communities is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization of community.description in about.html...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

Cross site scripting

invenio-communities before 1.0.0a20 allows XSS...

PYSEC-2019-25

invenio-communities before 1.0.0a20 allows XSS...

PYSEC-2019-95

invenio-communities before 1.0.0a20 allows XSS...

PYSEC-2019-25

invenio-communities before 1.0.0a20 allows XSS...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

CVE-2019-1020005

CVE-2019-1020005 affects invenio-communities up to version 1.0.0a20, where two Jinja templates in the module allow cross-site scripting due to lack of input sanitization in community description and pages. The issue enables an attacker to inject scripts when creating a new community or editing fi...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

PT-2019-20176

Name of the Vulnerable Software and Affected Versions invenio-communities versions prior to 1.0.0a20 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website. Recommendations For versions prior to 1.0.0a20,...

CVE-2019-1020005: Improper Neutralization of Input During Web Page Generation

invenio-communities before 1.0.0a20 allows XSS...

GHSA-MFV8-Q39F-MGFG Cross-site Scripting in invenio-communities

Cross-Site Scripting XSS vulnerability in Jinja templates Impact A Cross-Site Scripting XSS vulnerability was discovered in two Jinja templates in the Invenio-Communities module. The vulnerability allows a user to create a new community and include script element tags inside the description and...

Cross-site Scripting in invenio-communities

Cross-Site Scripting XSS vulnerability in Jinja templates Impact A Cross-Site Scripting XSS vulnerability was discovered in two Jinja templates in the Invenio-Communities module. The vulnerability allows a user to create a new community and include script element tags inside the description and...

PT-2019-11621

Name of the Vulnerable Software and Affected Versions: Invenio-Communities versions prior to 1.0.0a20 Description: A Cross-Site Scripting XSS issue was found in the Invenio-Communities module, specifically in two Jinja templates. This issue allows a user to create a new community and include scri...