24 matches found
CVE-2011-0728
CVE-2011-0728 is a cross-site scripting (XSS) vulnerability in Loggerhead’s Python component; the issue affects the templatefunctions.py file and allows remote authenticated users to inject script/HTML via a filename in the revision view. Connected advisories (GHSA and OSV) reiterate the same, na...
CVE-2011-0728
Cross-site scripting XSS vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view...
CVE-2011-0728
Cross-site scripting XSS vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view...
CVE-2011-0728: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view...