1 matches found
PYSEC-2026-2527 Isso affected by Stored XSS via comment website field
Impact This is a stored Cross-Site Scripting XSS vulnerability affecting the website and author comment fields. The website field was HTML-escaped using quote=False, which left single and double quotes unescaped. Since the frontend inserts the website value directly into a single-quoted href...
6.1CVSS6.2AI score0.00216EPSS
SaveExploits0References7
20