2 matches found
PYSEC-2026-3419 wger has Stored XSS via Unescaped License Attribution Fields
Stored XSS via Unescaped License Attribution Fields Summary The AbstractLicenseModel.attributionlink property in wger/utils/models.py constructs HTML strings by directly interpolating user-controlled fields licenseauthor, licensetitle, licenseobjecturl, licenseauthorurl, licensederivativesourceur...
5.4CVSS6.2AI score0.00207EPSS
SaveExploits1References6
Wger Has Stored XSS Via Unescaped License Attribution Fields
Stored XSS via Unescaped License Attribution Fields Summary The "AbstractLicenseModel.attributionlink" property in "wger/utils/models.py" constructs HTML strings by directly interpolating user-controlled fields "licenseauthor", "licensetitle", "licenseobjecturl", "licenseauthorurl",...
5.4CVSS5.9AI score0.00207EPSS
SaveExploits1Affected Software1
20