Description
Cross-site scripting (XSS) vulnerability in Airbnb Knowledge Repo 0.7.4 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post/posts/new_report.kp URI.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | knowledge-repo | < 0.9.0 | 0.9.0 | GHSA-xmw7-848p-p95w |
| PyPI | knowledge-repo | < 0.7.5 | 0.7.5 | PYSEC-2018-116 |