MEDIUM 5.4
PYSEC-2023-143
상세
Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the license_author field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
PyPI / wger
최초 영향 버전:
0 No fixed version published yet for wger (pip). Pin to a known-safe version or switch to an alternative.