CVE-2016-4807
2 advisories.
PyPI/web2py CVE-2016-4807: medium 4.8, EPSS 2.30%
Web2py Reflected XSS vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.14.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-pvcp-73cg-6f77
- https://nvd.nist.gov/vuln/detail/CVE-2016-4807
- https://github.com/web2py/web2py
- https://www.exploit-db.com/exploits/39821
- http://packetstormsecurity.com/files/137070/Web2py-2.14.5-CSRF-XSS-Local-File-Inclusion.html
CVE-2016-4807 · published · modified · JSON
PyPI/web2py CVE-2016-4807: medium 4.8, EPSS 2.30%
Web2py Reflected XSS vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.14.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1063
- https://nvd.nist.gov/vuln/detail/CVE-2016-4807
- https://github.com/web2py/web2py
- https://www.exploit-db.com/exploits/39821
- http://packetstormsecurity.com/files/137070/Web2py-2.14.5-CSRF-XSS-Local-File-Inclusion.html
- https://pypi.org/project/web2py
- https://github.com/advisories/GHSA-pvcp-73cg-6f77
CVE-2016-4807 · published · modified · JSON