CVE-2020-28364

CVE-2020-28364 describes a stored XSS vulnerability in Locust’s Web UI prior to version 1.3.2 when the UI is exposed to external users. The issue arises from the Web UI handling input insecurely, enabling an attacker to inject scripts via user-controlled data. Impact is limited to cases where the...