In short
- CVE-2016-4807 is a MEDIUM (CVSS 4.8) vulnerability affecting web2py, web2py (web2py).
- Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.3% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
| Package | Affected versions | Patched versions |
|---|
| web2py PyPI | ≤ 2.14.5
| No fix yet |
| web2py | ≤ 2.14.5
| No fix yet |
Description
Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin).
NVD description
Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free