Trape Project Trape
2 CVEs affecting Trape Project Trape. Latest disclosed: 2019-07-10. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-13489 | Critical | 9.8 | 2019-07-10 | Trape through 2019-05-08 has SQL injection via the data[2] variable in core/db.py, as demonstrated by the /bs t parameter. |
CVE-2019-13488 | Medium | 6.1 | 2019-07-10 | A cross-site scripting (XSS) vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via… |