Cross-site Scripting (XSS)

lincmsflask is vulnerable to cross-site scripting xss. The vulnerability exists due to the lack of sanitization of user name in the register function which will execute the script in the logs function...

Insecure Authentication

lincmsflask uses insecure authentication. The vulnerability exists due to a lack of rate-limiting in the login function...