WeasyPrint: CSS flaw allows remote JavaScript code execution

A Cross Site Scripting vulnerability affects WeasyPrint through CSS injection.

Published 1sem1 sourceImportantupdated 6j

≈ 17sSpeed

The fact

Exploitation allows an attacker to execute JavaScript code in the target site's context.

The flaw exposes users to data theft or account takeover attacks.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on August 15, 2026