CVE-2020-11944
Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in call in abe.py because the PATH_INFO environment variable is mishandled during a PageNotFound exception.
6.1CVSS
5.9AI Score
0.001EPSS