Lucene search
K

Cross-site Scripting

🗓️ 04 Dec 2025 08:25:53Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 2 Views

pyload_ng is vulnerable to XSS from unsafe untrusted parameter handling in Captcha and CNL endpoints.

Related
Detection
Refs
Vulners
Node
pyload_ngpyload_ngRange0.5.0a5.dev5280.5.0b3.dev90python
OR
pyload_ngpyload_ngMatch0.5.0a5.dev528python
OR
pyload_ngpyload_ngMatch0.5.0a5.dev532python
OR
pyload_ngpyload_ngMatch0.5.0a5.dev535python
OR
pyload_ngpyload_ngMatch0.5.0a5.dev536python
OR
pyload_ngpyload_ngMatch0.5.0a5.dev537python
OR
pyload_ngpyload_ngMatch0.5.0a5.dev539python
OR
pyload_ngpyload_ngMatch0.5.0a5.dev540python
OR
pyload_ngpyload_ngMatch0.5.0a5.dev545python
OR
pyload_ngpyload_ngMatch0.5.0a5.dev562python
OR
pyload_ngpyload_ngMatch0.5.0a5.dev564python
OR
pyload_ngpyload_ngMatch0.5.0a5.dev565python
OR
pyload_ngpyload_ngMatch0.5.0a6.dev570python
OR
pyload_ngpyload_ngMatch0.5.0a6.dev578python
OR
pyload_ngpyload_ngMatch0.5.0a6.dev587python
OR
pyload_ngpyload_ngMatch0.5.0a7.dev596python
OR
pyload_ngpyload_ngMatch0.5.0a8.dev602python
OR
pyload_ngpyload_ngMatch0.5.0a9.dev615python
OR
pyload_ngpyload_ngMatch0.5.0a9.dev629python
OR
pyload_ngpyload_ngMatch0.5.0a9.dev632python
OR
pyload_ngpyload_ngMatch0.5.0a9.dev641python
OR
pyload_ngpyload_ngMatch0.5.0a9.dev643python
OR
pyload_ngpyload_ngMatch0.5.0a9.dev655python
OR
pyload_ngpyload_ngMatch0.5.0a9.dev806python
OR
pyload_ngpyload_ngMatch0.5.0b1.dev1python
OR
pyload_ngpyload_ngMatch0.5.0b1.dev2python
OR
pyload_ngpyload_ngMatch0.5.0b1.dev3python
OR
pyload_ngpyload_ngMatch0.5.0b1.dev4python
OR
pyload_ngpyload_ngMatch0.5.0b1.dev5python
OR
pyload_ngpyload_ngMatch0.5.0b2.dev10python
OR
pyload_ngpyload_ngMatch0.5.0b2.dev11python
OR
pyload_ngpyload_ngMatch0.5.0b2.dev12python
OR
pyload_ngpyload_ngMatch0.5.0b2.dev9python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev13python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev14python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev17python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev18python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev19python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev20python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev21python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev22python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev24python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev26python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev27python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev28python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev29python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev30python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev31python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev32python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev33python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev34python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev35python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev38python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev39python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev40python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev41python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev42python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev43python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev44python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev45python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev46python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev47python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev48python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev49python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev50python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev51python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev52python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev53python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev54python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev57python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev60python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev62python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev64python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev65python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev66python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev67python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev68python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev69python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev70python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev71python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev72python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev73python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev74python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev75python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev76python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev77python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev78python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev79python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev80python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev81python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev82python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev85python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev87python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev88python
OR
pyload_ngpyload_ngMatch0.5.0b3.dev89python
OR
pyload_ngpyload_ngRange0.4.00.5.0b3.dev90python

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Jun 2026 09:56Current
6.7Medium risk
Vulners AI Score6.7
CVSS 3.18.1
EPSS0.00067
SSVC
2