CVE-2011-0728
Cross-site scripting (XSS) vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view.
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- michael_hudson-doyle:loggerhead
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-qjmg-77xh-7mjw | PyPI | loggerhead | <1.18.1 | 1.18.1 |
| PYSEC-2026-840 | PyPI | loggerhead | <1.18.1 | 1.18.1 |
References
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057413.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057479.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057502.html
- http://secunia.com/advisories/43822
- http://secunia.com/advisories/44017