Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mark Pilgrim Universal Feed Parser feedparser.py跨站脚本攻击漏洞
Vulnerability Description
Universal Feed Parser(又名feedparser或者python-feedparser）5.0.1之前版本的feedparser.py中存在跨站脚本攻击漏洞。由于某些URI schemes的输入在使用之前没有经过正确过滤，当浏览恶意数据时，远程攻击者可利用此漏洞在受影响站点的用户浏览器会话中注入任意HTML及脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A