CVE-2024-37063

A cross-site scripting XSS vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a maliocusly crafted report is viewed in the browser...

CVE-2024-37063

A cross-site scripting XSS vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a maliocusly crafted report is viewed in the browser...

CVE-2024-37063

CVE-2024-37063 is a cross-site scripting (XSS) vulnerability affecting the open-source library ydata-profiling (versions 3.7.0 and newer). The root cause, as cited by multiple sources, is insufficient sanitization of user-supplied inputs in reports, allowing malicious payloads to execute when a c...