Cross-Site Scripting

Overview

All versions of sexstatic are vulnerable to stored cross-site scripting (xss). This is exploitable if an attacker can control a filename that is served by sexstatic.

Recommendation

As there is no fix is currently available for this vulnerability it is our recommendation to not install or used this module at this time.

References

• HackerOne Report
• GitHub Advisory