NetSight
medium6.1

CVE-2020-19000

Cross Site Scripting (XSS) in Simiki

Impact

Cross Site Scripting (XSS) in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary code via line 54 of the component 'simiki/blob/master/simiki/generators.py'.

Affected packages

EcosystemPackageAffectedFixed in
pipsimiki<= 1.6.2.11.6.2.2

Affected products

VendorProductAffected versions
Simiki ProjectSimiki
Version 1.6.2.1

Weakness classification

References