—
PYSEC-2021-340
Details
Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / lin-cms
Introduced in:
0 No fixed version published yet for lin-cms (pip). Pin to a known-safe version or switch to an alternative.