CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

PyPA•added 2026/07/13 3:02 p.m.•23 views

wger has Stored XSS via Unescaped License Attribution Fields

Stored XSS via Unescaped License Attribution Fields SummaryThe AbstractLicenseModel.attributionlink property in wger/utils/models.py constructs HTML strings by directly interpolating user-controlled fields licenseauthor, licensetitle, licenseobjecturl, licenseauthorurl, licensederivativesourceurl...

5.4CVSS6.2AI score0.00248EPSS

SaveExploits1References6Affected Software1

OSV•added 2026/07/13 3:02 p.m.•25 views

PYSEC-2026-3419 wger has Stored XSS via Unescaped License Attribution Fields

Stored XSS via Unescaped License Attribution Fields Summary The AbstractLicenseModel.attributionlink property in wger/utils/models.py constructs HTML strings by directly interpolating user-controlled fields licenseauthor, licensetitle, licenseobjecturl, licenseauthorurl, licensederivativesourceur...

5.4CVSS6.2AI score0.00248EPSS

SaveExploits1References6

Veracode•added 2026/04/18 5:28 a.m.•26 views

Wger Has Stored XSS Via Unescaped License Attribution Fields

Stored XSS via Unescaped License Attribution Fields Summary The "AbstractLicenseModel.attributionlink" property in "wger/utils/models.py" constructs HTML strings by directly interpolating user-controlled fields "licenseauthor", "licensetitle", "licenseobjecturl", "licenseauthorurl",...

5.4CVSS6.1AI score0.00248EPSS

SaveExploits1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by