Web2py Reflected XSS vulnerability

GHSA-pvcp-73cg-6f77 · CVE-2016-4807

Published May 17, 2022 · Modified Apr 21, 2025

Description

Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin).

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2016-4807
PACKAGE https://github.com/web2py/web2py
WEB https://www.exploit-db.com/exploits/39821
WEB http://packetstormsecurity.com/files/137070/Web2py-2.14.5-CSRF-XSS-Local-File-Inclusion.html

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes