Filtered by vendor Makotemplates Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2010-2480 1 Makotemplates 1 Mako 2024-11-21 N/A
Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element.