CVE-2020-7734

All versions of package cabot are vulnerable to Cross-site Scripting (XSS) via the Endpoint column.

• CWE-79

• https://github.com/arachnys/cabot/pull/694Exploit, Patch, Third Party Advisory
• https://itsmeanonartist.tech/blogs/blog2.htmlExploit, Third Party Advisory
• https://snyk.io/vuln/SNYK-PYTHON-CABOT-609862Third Party Advisory
• https://www.exploit-db.com/exploits/48791Exploit, Third Party Advisory, VDB Entry
• https://github.com/arachnys/cabot/pull/694Exploit, Patch, Third Party Advisory
• https://itsmeanonartist.tech/blogs/blog2.htmlExploit, Third Party Advisory
• https://snyk.io/vuln/SNYK-PYTHON-CABOT-609862Third Party Advisory
• https://www.exploit-db.com/exploits/48791Exploit, Third Party Advisory, VDB Entry

Published

Sep 22, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7726All versions of package safe-object2 are vulnerable to Proto…9.8
• CVE-2020-7727All versions of package gedi are vulnerable to Prototype Pol…9.8
• CVE-2020-7729The package grunt before 1.3.0 are vulnerable to Arbitrary C…7.1
• CVE-2020-7730The package bestzip before 2.1.7 are vulnerable to Command I…9.8
• CVE-2020-7731This affects all versions <0.7.0 of package github.com/russe…7.5
• CVE-2020-7733The package ua-parser-js before 0.7.22 are vulnerable to Reg…7.5
• CVE-2020-7735The package ng-packagr before 10.1.1 are vulnerable to Comma…6.6
• CVE-2020-7736The package bmoor before 0.8.12 are vulnerable to Prototype …9.8
• CVE-2020-7737All versions of package safetydance are vulnerable to Protot…9.8
• CVE-2020-7738All versions of package shiba are vulnerable to Arbitrary Co…8.3
• CVE-2020-7739This affects all versions of package phantomjs-seo. It is po…8.2
• CVE-2020-7740This affects all versions of package node-pdf-generator. Due…8.2