MEDIUM 5.4
PYSEC-2023-143
Details
Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the license_author field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / wger
Introduced in:
0 No fixed version published yet for wger (pip). Pin to a known-safe version or switch to an alternative.