Lucene search
K

6 matches found

Veracode
Veracode
added 2023/01/15 9:36 p.m.15 views

Cross-site Scripting (XSS)

djangoucamlookup is vulnerable to Cross-Site Scripting XSS attacks. The invocation of jquery select2 to provide searchable dropdowns does not sanitize data coming from the lookup, allowing an attacker to inject and execute malicious JavaScript through formatResult function of the component Lookup...

6.1CVSS1.8AI score0.00251EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2023/01/05 9:30 a.m.15 views

GHSA-PJX4-3F3P-29V3 django-ucamlookup Cross-site Scripting vulnerability

A vulnerability classified as problematic was found in University of Cambridge django-ucamlookup up to 1.9.1. Affected by this vulnerability is an unknown functionality of the component Lookup Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading ...

6.1CVSS5.9AI score0.00251EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2023/01/05 9:30 a.m.15 views

django-ucamlookup Cross-site Scripting vulnerability

A vulnerability classified as problematic was found in University of Cambridge django-ucamlookup up to 1.9.1. Affected by this vulnerability is an unknown functionality of the component Lookup Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading ...

6.1CVSS1.8AI score0.00251EPSS
Exploits0References7Affected Software1
Prion
Prion
added 2023/01/05 9:15 a.m.15 views

Cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic was found in University of Cambridge django-ucamlookup up to 1.9.1. Affected by this vulnerability is an unknown functionality of the component Lookup Handler. The manipulation leads to cross site scripting. The attack can be...

5.8CVSS6.5AI score0.00251EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/05 12:0 a.m.1 views

PT-2023-10329 · Unknown · Django-Ucamlookup

Name of the Vulnerable Software and Affected Versions: django-ucamlookup versions up to 1.9.1 Description: A vulnerability was found in the Lookup Handler component of django-ucamlookup, leading to cross-site scripting. The attack can be launched remotely. This issue affects products that are no...

6.1CVSS6.8AI score0.00251EPSS
Exploits0References12
CNNVD
CNNVD
added 2023/01/05 12:0 a.m.1 views

django-ucamlookup 跨站脚本漏洞

django-ucamlookup is an open source library from University of Cambridge. It provides useful methods and templates to integrate django applications with the University of Cambridge lookup service. A cross-site scripting vulnerability exists in versions prior to django-ucamlookup 1.9.2, which stem...

6.1CVSS4.1AI score0.00251EPSS
Exploits0References5
Rows per page
Query Builder