7 matches found
EUVD-2023-0339
Malicious code in bioql PyPI...
6.1CVSS6.3AI score0.0045EPSS
SaveExploits0References4
Cross-site Scripting (XSS)
phoenixhtml is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it outputs to the front end, allowing an attacker to inject and execute malicious JavaScript via HEEx class attributes in tag.ex...
6.1CVSS6.4AI score0.0045EPSS
SaveExploits0References4Affected Software1
phoenix_html allows Cross-site Scripting in HEEx class attributes
tag.ex in Phoenix Phoenix.HTML aka phoenixhtml before 3.0.4 allows XSS in HEEx class attributes...
6.1CVSS5.8AI score0.0045EPSS
SaveExploits0References4Affected Software1
CVE-2021-46871
tag.ex in Phoenix Phoenix.HTML aka phoenixhtml before 3.0.4 allows XSS in HEEx class attributes...
6.1CVSS6AI score0.0045EPSS
SaveExploits0References2
CVE-2021-46871
tag.ex in Phoenix Phoenix.HTML aka phoenixhtml before 3.0.4 allows XSS in HEEx class attributes...
6.1CVSS6AI score0.0045EPSS
SaveExploits0References2
20