Skip to content
OpenAdvisories

Product · librespeed

speedtest

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Stored Cross-site Scripting in results JSON API in librespeed/speedtest

    librespeed/speedtest is an open source, self-hosted speed test for HTML5. In affected versions missing neutralization of the ISP information in a speedtest result leads to stored Cross-site scripting in the JSON API. The `processedString` field in the `ispinf…