EUVD-2019-0062

Malware in sbrugna...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

GHSA-HJX6-F647-MVF9 Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components

Impact We have identified a Cross-Site Scripting XSS vulnerability within certain React components related to community members in the Invenio-Communities module. This vulnerability enables a user to inject a script tag into the Affiliations field during the account registration process. The...

Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components

Impact We have identified a Cross-Site Scripting XSS vulnerability within certain React components related to community members in the Invenio-Communities module. This vulnerability enables a user to inject a script tag into the Affiliations field during the account registration process. The...

Cross-site Scripting (XSS)

invenio-communities is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization of community.description in about.html...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

PYSEC-2019-25

invenio-communities before 1.0.0a20 allows XSS...

Cross site scripting

invenio-communities before 1.0.0a20 allows XSS...

PYSEC-2019-25

invenio-communities before 1.0.0a20 allows XSS...

PYSEC-2019-95

invenio-communities before 1.0.0a20 allows XSS...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

CVE-2019-1020005

CVE-2019-1020005 affects invenio-communities up to version 1.0.0a20, where two Jinja templates in the module allow cross-site scripting due to lack of input sanitization in community description and pages. The issue enables an attacker to inject scripts when creating a new community or editing fi...

GHSA-MFV8-Q39F-MGFG Cross-site Scripting in invenio-communities

Cross-Site Scripting XSS vulnerability in Jinja templates Impact A Cross-Site Scripting XSS vulnerability was discovered in two Jinja templates in the Invenio-Communities module. The vulnerability allows a user to create a new community and include script element tags inside the description and...

Cross-site Scripting in invenio-communities

Cross-Site Scripting XSS vulnerability in Jinja templates Impact A Cross-Site Scripting XSS vulnerability was discovered in two Jinja templates in the Invenio-Communities module. The vulnerability allows a user to create a new community and include script element tags inside the description and...