Cross-site Scripting (XSS)

whooglesearch is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of data input in the HTTP errormessage request allowing an attacker to inject maliciously crafted script via flask.rendertemplate function in error.html...

PYSEC-2022-226

The package whoogle-search before 0.7.2 are vulnerable to Cross-site Scripting XSS via the query string parameter q. In the case where it does not contain the http string, it is used to build the errormessage that is then rendered in the error.html template, using the flask.rendertemplate functio...