Homepage
About Snyk

piccolo-admin@0.43.0 vulnerabilities

A powerful and modern admin interface / CMS, powered by Piccolo and ASGI.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the piccolo-admin package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Cross-site Scripting (XSS)

piccolo-admin is an A powerful and modern admin interface / CMS, powered by Piccolo and ASGI.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to the handling of SVG file uploads in the admin panel. An attacker can gain unauthorized access and perform actions such as creating, modifying, or deleting table records by uploading a malicious SVG file.

How to fix Cross-site Scripting (XSS)?

Upgrade piccolo-admin to version 1.3.2 or higher.

[,1.3.2)
Go back to all versions of this package