CVE-2025-32413

Impact

Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py.

Affected products

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/vulnerability-lookup/vulnerability-lookup/commit/0a120af1de4a0a13bc2e2000f3c4639291122ba0
• https://github.com/vulnerability-lookup/vulnerability-lookup/compare/v2.7.0...v2.7.1