Skip to content
OpenAdvisories

Package · Azure Linux

babel

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    CVE-2024-8095

    BabelZ – Google Translate Widget <= 1.1.5 - CSRF to Stored XSS

    The BabelZ WordPress plugin through 1.1.5 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

    babel Web / CMS Azure Linux
  • High 7.8
    CVE-2021-42771

    Directory Traversal in Babel

    Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

    babel babel py3-babel python-babel Debian Azure Linux Alpine PyPI