Vulnerability-Lookup Stored Cross-Site Scripting Vulnerability in User Bios

A stored cross-site scripting vulnerability has been identified in Vulnerability-Lookup versions prior to 2.7.1. The issue arises in the user bio section, where malicious scripts can be injected and subsequently executed.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Reproduction

To reproduce this vulnerability, create a user profile and inject a script into the bio section. Once saved, the script will execute when the profile is viewed.

Remediation

Users can update to Vulnerability-Lookup version 2.7.1 or later, where this vulnerability has been fixed.