Lucene search
+L

6 matches found

OSV
OSV
added 2025/10/03 7:32 p.m.7 views

CVE-2025-53354 NiceGUI is vulnerable to Reflected XSS attack

NiceGUI is a Python-based UI framework. Versions 2.24.2 and below are at risk for Cross-Site Scripting XSS when developers render unescaped user input into the DOM using ui.html. NiceGUI did not enforce HTML or JavaScript sanitization, so applications that directly combine components like ui.inpu...

6.1CVSS6AI score
SaveExploits0References4
Rows per page
Query Builder