CVE-2021-21319

Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored to be displayed later on self subscription page. The self subscription feature can be disabled as a workaround this is the default state...

CVE-2021-21319: Improper Neutralization of Input During Web Page Generation

Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored to be displayed later on self subscription page. The self subscription feature can be disabled as a workaround this is the default state...

Galette cross-site scripting vulnerabilities

Galette is open source a membership management web application for non-profit organizations. Galette suffers from a cross-site scripting vulnerability in versions prior to 0.9.5 that stems from a lack of checksum filtering of user-supplied and output data. An attacker could store malicious...

PT-2021-14416

Name of the Vulnerable Software and Affected Versions Galette versions prior to 0.9.5 Description Galette is a membership management web application geared towards non-profit organizations. In affected versions, malicious javascript code can be stored to be displayed later on the self-subscriptio...