{"action":"Upgrade trac to 0.10.3.1 or later.","affected":[{"fixed":"0.10.3.1","introduced":"0"}],"component":"trac","cve_ids":["CVE-2007-1405"],"ecosystem":"PyPI","epss":0.01145,"exploited":false,"fixed_versions":["0.10.3.1"],"ghsa_id":"GHSA-w7x2-57f7-3p3x","id":"tcs_01M5KG535CWWGSA3S1QNYGM1GC","modified_at":"2026-06-10T17:02:44.765592569Z","published_at":"2007-03-10T22:19:00Z","references":["https://osv.dev/vulnerability/PYSEC-2007-2","http://trac.edgewall.org/wiki/ChangeLog","http://secunia.com/advisories/24470","http://www.securityfocus.com/bid/22888","http://www.vupen.com/english/advisories/2007/0900","https://exchange.xforce.ibmcloud.com/vulnerabilities/32897","https://github.com/advisories/GHSA-w7x2-57f7-3p3x"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2007-2","url":"https://osv.dev/vulnerability/PYSEC-2007-2"}],"summary":"Cross-site scripting (XSS) vulnerability in the \"download wiki page as text\" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web"}