CVE-2024-39162

pyspider through 0.3.10 allows /update XSS. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2024-39162

The open-source web crawler pyspider versions 0.3.10 and earlier is vulnerable to Cross-Site Scripting (XSS) via the /update endpoint. The root cause is a failure to properly sanitize the name parameter , allowing an attacker to execute malicious scripts. This vulnerability specifically affects p...