Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-02-17	CVE-2015-5216	Cross-site Scripting vulnerability in Ipsilon-Project Ipsilon The Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly escape certain characters in a Python exception-message template, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via an HTTP response. network low complexity ipsilon-project CWE-79	6.1
2020-02-17	CVE-2015-5215	Cross-site Scripting vulnerability in Ipsilon-Project Ipsilon The default configuration of the Jinja templating engine used in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not enable auto-escaping, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via template variables. network low complexity ipsilon-project CWE-79	6.1