CVE-2011-0728

Cross-site scripting XSS vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view...

CVE-2011-0728

CVE-2011-0728 is a cross-site scripting (XSS) vulnerability in Loggerhead’s Python component; the issue affects the templatefunctions.py file and allows remote authenticated users to inject script/HTML via a filename in the revision view. Connected advisories (GHSA and OSV) reiterate the same, na...