repository icon
liangliangyy / djangoblog Project repository

🍺基于Django的博客系统

Submit a report

FIRST INTERACTION

WITHIN6 DAYS

REVIEW

WITHIN6 DAYS

FIX

WITHIN7 DAYS

Stored XSS via Markdown Comment
tht1997
Medium
•CVE-2023-2954
Allows upload dangerous file type to server
ktg9
not applicable
Weak forgot password code allows bruteforce and lead to account takeover
ktg9
not applicable
Improper Access Control
nhiephon
Medium
•$45
Improper Removal of Sensitive Information Before Storage or Transfer
nhiephon
Medium
•$5
Improper Privilege Management
ktg9
Medium
•$70
Cross-site Scripting (XSS) - Stored
ktg9
Medium
•$35
Cross-Site Request Forgery (CSRF)
ktg9
Low
•$42.5