Lucene search
+L

8 matches found

OSV
OSV
added 2026/02/24 4:03 p.m.23 views

GHSA-9FWW-8CPR-Q66R Isso affected by Stored XSS via comment website field

Impact This is a stored Cross-Site Scripting XSS vulnerability affecting the website and author comment fields. The website field was HTML-escaped using quote=False, which left single and double quotes unescaped. Since the frontend inserts the website value directly into a single-quoted href...

6.1CVSS5.9AI score0.00216EPSS
SaveExploits0References5
Rows per page
Query Builder