CVE-2010-2480

Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote…

published July 2, 2010

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01824 · 78.5th percentile
Published
2010-07-02T18:30Z
EPSS history
Timeline
  • 02 JUL 18:30Z
    Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote…
    cvelistv5