Lucene search
+L

6 matches found

OSV
OSV
•added 2025/12/15 8:15 p.m.•12 views

GO-2025-4228 Algernon Cross-Site Scripting vulnerability in github.com/xyproto/algernon

Algernon Cross-Site Scripting vulnerability in github.com/xyproto/algernon...

6.1CVSS7.5AI score0.0044EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-1536

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00691EPSS
SaveExploits1References10
Prion
Prion
•added 2023/05/31 5:15 a.m.•28 views

Cross site scripting

All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possibl...

5.8CVSS5.9AI score0.00691EPSS
SaveExploits1References5
Mend
Mend
•added 2023/05/31 5:00 a.m.•0 views

CVE-2023-26131

All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possibl...

6.1CVSS0.00691EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2023/05/31 5:00 a.m.•47 views

CVE-2023-26131

All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possibl...

5.4CVSS6.2AI score0.00691EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/31 12:00 a.m.•0 views

CVE-2023-26131: Improper Neutralization of Input During Web Page Generation

All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possibl...

6.1CVSS6AI score0.00691EPSS
SaveExploits1References4
Rows per page
Query Builder