An issue was discovered in lxml before 4.2.5. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
XSS
Lxml
Debian Linux
Ubuntu Linux
NVD
GitHub
CVSS 3.1
6.1
EPSS
2.4%