3 matches found
CVE-2019-1020005
invenio-communities before 1.0.0a20 allows XSS...
5.4CVSS6.8AI score0.00682EPSS
SaveExploits0References1
CVE-2019-1020005
invenio-communities before 1.0.0a20 allows XSS...
5.5AI score0.00682EPSS
SaveExploits0References1
CVE-2019-1020005
CVE-2019-1020005 affects invenio-communities up to version 1.0.0a20, where two Jinja templates in the module allow cross-site scripting due to lack of input sanitization in community description and pages. The issue enables an attacker to inject scripts when creating a new community or editing fi...
5.4CVSS5.4AI score0.00682EPSS
SaveExploits0References1Affected Software1
20