Lucene search
+L

1 matches found

PyPA
PyPA
•added 2026/07/07 4:03 p.m.•29 views

NiceGUI Reflected XSS in ui.add_css, ui.add_scss, and ui.add_sass via Style Injection

SummaryA Cross-Site Scripting XSS vulnerability exists in ui.addcss, ui.addscss, and ui.addsass functions in NiceGUI v3.3.1 and earlier.These functions allow developers to inject styles dynamically. However, they lack proper sanitization or encoding for the JavaScript context they generate. An...

6.1CVSS6AI score0.00275EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder