VYPR

flaskBlog

by DogukanUrker

CVEs (1)

  • CVE-2024-22414Jan 17, 2024
    risk 0.00cvss epss 0.00

    flaskBlog is a simple blog app built with Flask. Improper storage and rendering of the `/user/` page allows a user's comments to execute arbitrary javascript code. The html template `user.html` contains the following code snippet to render comments made by a user: `<div…