https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:13:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-158504 EUVD-2026-158504 https://cve.radiocsirt.org/vuln/euvd-2026-158504 https://cve.radiocsirt.org/vuln/fkie_cve-2024-26152 <p>### Summary On all Label Studio versions prior to 1.11.0, data imported via file upload feature is not properly sanitized prior to being rendered within a [`Choices`](https://labelstud.io/tags/choices) or [`Labels`](https://labelstud.io/tags/labels) tag, resulting in an XSS vulnerability.</p> <p>### Details Need permission to use the &#34;data import&#34; function. This was reproduced on Label Studio 1.10.1.</p> <p>### PoC</p> <p>1. Create a project. </p> <p>2. Upload a file containing the payload using the &#34;Upload Files&#34; function.  </p> <p>The following are the contents of the files used in the PoC ``` { &#34;data&#34;: { &#34;prompt&#34;: &#34;labelstudio universe image&#34;, &#34;images&#34;: [ { &#34;value&#34;: &#34;id123#0&#34;, &#34;style&#34;: &#34;margin: 5px&#34;, &#34;html&#34;: &#34;&lt;img width=&#39;400&#39; src=&#39;https://labelstud.io/_astro/images-tab.64279c16_ZaBSvC.avif&#39; onload=alert(document.cookie)&gt;&#34; } ] } } ```</p> <p>3. Select the text-to-image generation labeling template of Ranking and scoring  or [`Labels`](https://labelstud.io/tags/labels) tag, resulting in an XSS vulnerability.</p> <p>### Details Need permission to use the &#34;data import&#34; function. This was reproduced on Label Studio 1.10.1.</p> <p>### PoC</p> <p>1. Create a project. </p> <p>2. Upload a file containing the payload using the &#34;Upload Files&#34; function.  </p> <p>The following are the contents of the files used in the PoC ``` { &#34;data&#34;: { &#34;prompt&#34;: &#34;labelstudio universe image&#34;, &#34;images&#34;: [ { &#34;value&#34;: &#34;id123#0&#34;, &#34;style&#34;: &#34;margin: 5px&#34;, &#34;html&#34;: &#34;&lt;img width=&#39;400&#39; src=&#39;https://labelstud.io/_astro/images-tab.64279c16_ZaBSvC.avif&#39; onload=alert(document.cookie)&gt;&#34; } ] } } ```</p> <p>3. Select the text-to-image generation labeling template of Ranking and scoring  or [`Labels`](https://labelstud.io/tags/labels) tag, resulting in an XSS vulnerability.</p> <p>### Details Need permission to use the &#34;data import&#34; function. This was reproduced on Label Studio 1.10.1.</p> <p>### PoC</p> <p>1. Create a project. </p> <p>2. Upload a file containing the payload using the &#34;Upload Files&#34; function.  </p> <p>The following are the contents of the files used in the PoC ``` { &#34;data&#34;: { &#34;prompt&#34;: &#34;labelstudio universe image&#34;, &#34;images&#34;: [ { &#34;value&#34;: &#34;id123#0&#34;, &#34;style&#34;: &#34;margin: 5px&#34;, &#34;html&#34;: &#34;&lt;img width=&#39;400&#39; src=&#39;https://labelstud.io/_astro/images-tab.64279c16_ZaBSvC.avif&#39; onload=alert(document.cookie)&gt;&#34; } ] } } ```</p> <p>3. Select the text-to-image generation labeling template of Ranking and scoring  or [`Labels`](https://labelstud.io/tags/labels) tag, resulting in an XSS vulnerability.</p> <p>### Details Need permission to use the &#34;data import&#34; function. This was reproduced on Label Studio 1.10.1.</p> <p>### PoC</p> <p>1. Create a project. </p> <p>2. Upload a file containing the payload using the &#34;Upload Files&#34; function.  </p> <p>The following are the contents of the files used in the PoC ``` { &#34;data&#34;: { &#34;prompt&#34;: &#34;labelstudio universe image&#34;, &#34;images&#34;: [ { &#34;value&#34;: &#34;id123#0&#34;, &#34;style&#34;: &#34;margin: 5px&#34;, &#34;html&#34;: &#34;&lt;img width=&#39;400&#39; src=&#39;https://labelstud.io/_astro/images-tab.64279c16_ZaBSvC.avif&#39; onload=alert(document.cookie)&gt;&#34; } ] } } ```</p> <p>3. Select the text-to-image generation labeling template of Ranking and scoring  or [`Labels`](https://labelstud.io/tags/labels) tag, resulting in an XSS vulnerability.</p> <p>### Details Need permission to use the &#34;data import&#34; function. This was reproduced on Label Studio 1.10.1.</p> <p>### PoC</p> <p>1. Create a project. </p> <p>2. Upload a file containing the payload using the &#34;Upload Files&#34; function.  </p> <p>The following are the contents of the files used in the PoC ``` { &#34;data&#34;: { &#34;prompt&#34;: &#34;labelstudio universe image&#34;, &#34;images&#34;: [ { &#34;value&#34;: &#34;id123#0&#34;, &#34;style&#34;: &#34;margin: 5px&#34;, &#34;html&#34;: &#34;&lt;img width=&#39;400&#39; src=&#39;https://labelstud.io/_astro/images-tab.64279c16_ZaBSvC.avif&#39; onload=alert(document.cookie)&gt;&#34; } ] } } ```</p> <p>3. Select the text-to-image generation labeling template of Ranking and scoring  or [`Labels`](https://labelstud.io/tags/labels) tag, resulting in an XSS vulnerability.</p> <p>### Details Need permission to use the &#34;data import&#34; function. This was reproduced on Label Studio 1.10.1.</p> <p>### PoC</p> <p>1. Create a project. </p> <p>2. Upload a file containing the payload using the &#34;Upload Files&#34; function.  </p> <p>The following are the contents of the files used in the PoC ``` { &#34;data&#34;: { &#34;prompt&#34;: &#34;labelstudio universe image&#34;, &#34;images&#34;: [ { &#34;value&#34;: &#34;id123#0&#34;, &#34;style&#34;: &#34;margin: 5px&#34;, &#34;html&#34;: &#34;&lt;img width=&#39;400&#39; src=&#39;https://labelstud.io/_astro/images-tab.64279c16_ZaBSvC.avif&#39; onload=alert(document.cookie)&gt;&#34; } ] } } ```</p> <p>3. Select the text-to-image generation labeling template of Ranking and scoring ![3 Select the text-to-image generation labelling template for Ranking and scoring](https://github.com/HumanSignal/label-studio/assets/3943358/f227f…</p> https://cve.radiocsirt.org/vuln/pysec-2024-249