Vulnerabilities (CVE)

Filtered by vendor Makotemplates Subscribe
Filtered by product Mako
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-2480 1 Makotemplates 1 Mako 2024-02-04 4.3 MEDIUM N/A
Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element.