misago@0.24.1 vulnerabilities
Misago is modern, fully featured forum application written in Python and ES6, powered by Django and React.js. It works out of the box and can be run alone or be connected to existing site with built in OAuth 2 client.
latest version
0.39.4
latest non vulnerable version
first published
10 years ago
latest version published
2 months ago
licenses detected
- [0,)
Direct Vulnerabilities
Known vulnerabilities in the misago package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Misago is a Misago is modern, fully featured forum application written in Python and ES6, powered by Django and React.js. It works out of the box and can be run alone or be connected to existing site with built in OAuth 2 client. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to missing user-input sanitization, in the How to fix Cross-site Scripting (XSS)? Upgrade | [,0.29.0) |