Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability

GHSA-rvf8-c35m-8289 · CVE-2020-18699 · PYSEC-2021-340

Published May 24, 2022 · Modified Jun 10, 2026

Description

Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-18699
WEB https://github.com/TaleLin/lin-cms-flask/issues/28
PACKAGE https://github.com/TaleLin/lin-cms-flask
WEB https://github.com/pypa/advisory-database/tree/main/vulns/lin-cms/PYSEC-2021-340.yaml

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes