Skip to content
OpenAdvisories

Package · PyPI

invenio-communities

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    GHSA-hjx6-f647-mvf9

    Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components

    # Impact We have identified a Cross-Site Scripting (XSS) vulnerability within certain React components related to community members in the Invenio-Communities module. This vulnerability enables a user to inject a script tag into the Affiliations field during …

    invenio-communities PyPI
  • Medium 5.4
    CVE-2019-1020005

    Cross-site Scripting in invenio-communities

    invenio-communities before 1.0.0a20 allows XSS.

    Invenio invenio-communities invenio-communities PyPI