Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:31001
HistoryJun 18, 2021 - 7:10 a.m.

Cross-Site Scripting (XSS)

2021-06-1807:10:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.002 Low

EPSS

Percentile

51.7%

JSON

wagtail is vulnerable to cross-site scripting. Lack of proper escaping of HTML in Wagtail StreamField blocks (CharBlock , TextBlock or a similar user-defined block derived from FieldBlock) allows a user with ability to author StreamField content to inject and execute arbitrary Javascript in a user’s browser.

CPENameOperatorVersion
wagtaille2.12.4
wagtaille2.11.7
wagtaille2.13.1

Related

nvd 1
osv 3
prion 1
github 1
cve 1
cvelist 1
nvd
nvd
CVE-2021-32681
2021-06-17 17:15:07
osv
osv
PYSEC-2021-103
2021-06-17 17:15:00
Cross-site Scripting in wagtail
2021-06-17 20:10:42
CVE-2021-32681
2021-06-17 17:15:07
prion
prion
Cross site scripting
2021-06-17 17:15:00
github
github
Cross-site Scripting in wagtail
2021-06-17 20:10:42
cve
cve
CVE-2021-32681
2021-06-17 17:15:07
cvelist
cvelist
CVE-2021-32681 Improper escaping of HTML ('Cross-site Scripting') in Wagtail StreamField blocks
2021-06-17 16:25:11

0.002 Low

EPSS

Percentile

51.7%

JSON
Related for VERACODE:31001
nvd1osv3prion1github1cve1cvelist1