Lucene search
+L

1 matches found

PyPA
PyPA
•added 2026/07/13 2:36 p.m.•18 views

Isso affected by Stored XSS via comment website field

ImpactThis is a stored Cross-Site Scripting XSS vulnerability affecting the website and author comment fields. The website field was HTML-escaped using quote=False, which left single and double quotes unescaped. Since the frontend inserts the website value directly into a single-quoted href...

6.1CVSS6.2AI score0.0037EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder