6 matches found
EUVD-2023-0339
Malicious code in bioql PyPI...
6.1CVSS6.2AI score0.00415EPSS
SaveExploits0References4
Cross-site Scripting (XSS)
phoenixhtml is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it outputs to the front end, allowing an attacker to inject and execute malicious JavaScript via HEEx class attributes in tag.ex...
6.1CVSS4.3AI score0.00415EPSS
SaveExploits0References4Affected Software1
phoenix_html allows Cross-site Scripting in HEEx class attributes
tag.ex in Phoenix Phoenix.HTML aka phoenixhtml before 3.0.4 allows XSS in HEEx class attributes...
6.1CVSS5.8AI score0.00415EPSS
SaveExploits0References4Affected Software1
CVE-2021-46871
tag.ex in Phoenix Phoenix.HTML aka phoenixhtml before 3.0.4 allows XSS in HEEx class attributes...
6.1CVSS6AI score
SaveExploits0References2
20