Description (CNA)
Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CIRCL / Vulnerability-Lookup | affected 0 before 2.7.1 |
CWE
CWE-79
References
- https://github.com/vulnerability-lookup/vulnerability-lookup/commit/0a120af1de4a0a13bc2e2000f3c4639291122ba0
- https://github.com/vulnerability-lookup/vulnerability-lookup/compare/v2.7.0...v2.7.1
ADP enrichment
No English description supplied.
No references supplied.