Improper Encoding or Escaping of Output

Overview grumpydictator/firefly-iii is a personal finances manager. Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the rendering process in the ale.twig template when user-controlled input is displayed without proper escaping. An attacker can execu...

EUVD-2021-31374

Malicious code in bioql PyPI...

PT-2024-40003 · Fluid · Fluid

Name of the Vulnerable Software and Affected Versions: Fluid affected versions not specified Description: The issue arises from the failure to properly encode user input in templates that utilize built-in Fluid ViewHelpers, making them susceptible to cross-site scripting. Recommendations: At the...

SUSE CVE-2021-44543

An XSS vulnerability was found in Privoxy which was fixed in cgierrornotemplate by encode the template name when Privoxy is configured to servce the user-manual itself...

SUSE CVE-2022-22818

The % debug % template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS...

ALPINE-CVE-2021-44543

An XSS vulnerability was found in Privoxy which was fixed in cgierrornotemplate by encode the template name when Privoxy is configured to servce the user-manual itself...

CVE-2021-44543

An XSS vulnerability was found in Privoxy which was fixed in cgierrornotemplate by encode the template name when Privoxy is configured to servce the user-manual itself...