CVE-2019-9765

In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comments.html.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-03-14

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Blog Mini (Blog Mini Project)

References

• https://github.com/xpleaf/Blog_mini/issues/43