Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/13 2:36 p.m.7 views

PYSEC-2026-2527 Isso affected by Stored XSS via comment website field

Impact This is a stored Cross-Site Scripting XSS vulnerability affecting the website and author comment fields. The website field was HTML-escaped using quote=False, which left single and double quotes unescaped. Since the frontend inserts the website value directly into a single-quoted href...

6.1CVSS6.2AI score0.00216EPSS
SaveExploits0References7
Rows per page
Query Builder