7 matches found
CVE-2019-9765
In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...
Cross site scripting
In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...
CVE-2019-9765
In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...
CVE-2019-9765
In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...
CVE-2019-9765
In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...
CVE-2019-9765: Improper Neutralization of Input During Web Page Generation
In Blogmini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails function, related to app/templates/articlecomments.html...
PT-2019-19856
Name of the Vulnerable Software and Affected Versions Blog mini version 1.0 Description A security issue exists in the application, where an XSS attack can be performed via the author name of a comment reply. This issue is related to the articleDetails function in the app/main/views.py file and t...