CVE-2020-13258
MEDIUM NUCLEIContentful <2020-05-21 - XSS
Title source: llmDescription
Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.py.
Nuclei Templates (1)
Contentful <=2020-05-21 - Cross-Site Scripting
MEDIUMby pikpikcu
Scores
CVSS v3
6.1
EPSS
0.0103
EPSS Percentile
77.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (2)
contentful/python_example
< 2020-05-21
pypi/contentful
0 - 1.12.4PyPI
Published
May 21, 2020
Tracked Since
Feb 18, 2026