CVE-2021-21319: Improper Neutralization of Input During Web Page Generation

Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored to be displayed later on self subscription page. The self subscription feature can be disabled as a workaround this is the default state...

Galette 跨站脚本漏洞

Galette is open source a membership management web application for non-profit organizations. Galette suffers from a cross-site scripting vulnerability in versions prior to 0.9.5 that stems from a lack of checksum filtering of user-supplied and output data. An attacker could store malicious...