Cross-site Scripting (XSS)

Overview dosage is an a comic strip downloader and archiver Affected versions of this package are vulnerable to Cross-site Scripting XSS via the HTML and RSS output handlers, which write unescaped user-controlled content such as comic text and page URLs directly into generated files. An attacker...

GHSA-75MW-H36V-2JV7 Dosage Vulnerable to Stored Cross-Site Scripting (XSS) in HTML/RSS Output Handlers

Summary The HTML and RSS output handlers in dosagelib/events.py write user-controlled content comic text and page URLs directly into generated files without proper HTML escaping. When a user scrapes a malicious webcomic and opens the generated HTML/RSS file, attacker-controlled JavaScript can...