漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Common Voice Cross-site Scripting vulnerability
Vulnerability Description
Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create public domain datasets for training voice recognition-related tools. Version 1.88.2 is vulnerable to reflected Cross-Site Scripting given that user-controlled data flows to a path expression (path of a network request). This issue may lead to reflected Cross-Site Scripting (XSS) in the context of Common Voice’s server origin. As of time of publication, it is unknown whether any patches or workarounds exist.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Common Voice 跨站脚本漏洞
Vulnerability Description
Common Voice是Common Voice开源的一个网络应用程序。 Common Voice 1.88.2版本存在跨站脚本漏洞，该漏洞源于容易受到跨站脚本攻击，此问题可能会导致 Common Voice 的服务器中出现跨站脚本 (XSS)。
CVSS Information
N/A
Vulnerability Type
N/A