trickest / cve

Gather and update all available and newest CVEs with their PoC.
https://trickest.com
MIT License
6.59k stars 837 forks source link

Escape HTML #76

Open nerrorsec opened 2 months ago

nerrorsec commented 2 months ago

The description of CVE-2024-8366 contains <script>alert(1)</script> which gets executed when CVE summary is viewed. This PR prevents the payloads in description from being executed by escaping the description.