Executive brief
OMERO.web uses jquery-form library, which may be vulnerable to XSS attack
Affected products
- PyPI omero-web
Junglewise Threat Intelligence
OMERO.web uses jquery-form library, which may be vulnerable to XSS attack
Severity: medium · CVSS 4 · Published 2025-11-24
Technologies: omero-web (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1717 - OMERO.web displays unecessary user information when requesting password reset
- PYSEC-2026-1718 - OMERO.web must check that the JSONP callback is a valid function
- PYSEC-2021-379 - OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.11.0, a variety of templates do not perform proper s
- PYSEC-2021-32 - OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 supports redirection to a giv
- PYSEC-2021-31 - OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information abo