CVE-2019-9765

Published March 14th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comments.html.

xpleaf/Blog_mini

An Open Source Blog System that developed with Flask.

GitHub

981