Vulners
Lucene search
2 matches found
GHSA-M4M5-J36M-8X72 html injection vulnerability in the `tuitse_html` function.
Impact When using tuitsehtml without quoting the input, there is a html injection vulnerability. It should use the django version django.utils.html.formathtml, instead of string.format Patches Upgrade to version 1.3.2. Workarounds Sanitizing Taigi input with HTML quotation. References...
6.1CVSS6.3AI score0.00495EPSS
Exploits0References6
html injection vulnerability in the `tuitse_html` function.
Impact When using tuitsehtml without quoting the input, there is a html injection vulnerability. It should use the django version django.utils.html.formathtml, instead of string.format Patches Upgrade to version 1.3.2. Workarounds Sanitizing Taigi input with HTML quotation. References...
6.1CVSS7AI score0.00495EPSS
Exploits0References6Affected Software1
20