{"id":"PYSEC-2023-101","details":"A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the hub parameter under the /grid/console page.","modified":"2025-10-09T08:26:07.719765Z","published":"2023-07-05T18:15:00Z","withdrawn":"2023-08-09T12:00:00Z","references":[{"type":"REPORT","url":"https://github.com/SeleniumHQ/selenium/issues/8259"}],"affected":[{"package":{"name":"selenium","ecosystem":"PyPI","purl":"pkg:pypi/selenium"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.2","1.0.1","1.0.3","2.0-dev","2.0-dev-9138","2.0-dev-9212","2.0-dev-9231","2.0-dev-9284","2.0-dev-9306","2.0-dev-9307","2.0-dev-9310","2.0-dev-9338","2.0-dev-9340","2.0-dev-9341","2.0-dev-9429","2.0.0","2.0.1","2.0a5","2.0b2","2.0b3","2.0b3dev","2.0b4dev","2.0dev1","2.0dev2","2.0dev3","2.0dev4","2.0dev5","2.0dev6","2.0rc1","2.0rc2","2.0rc3","2.1.0","2.10.0","2.11.0","2.11.1","2.12.0","2.12.1","2.13.0","2.13.1","2.14.0","2.15.0","2.16.0","2.17.0","2.18.1","2.19.0","2.19.1","2.2.0","2.20.0","2.21.0","2.21.1","2.21.2","2.21.3","2.22.0","2.22.1","2.23.0","2.24.0","2.25.0","2.26.0","2.27.0","2.28.0","2.29.0","2.3.0","2.30.0","2.31.0","2.32.0","2.33.0","2.34.0","2.35.0","2.36.0","2.37.0","2.37.1","2.37.2","2.38.0","2.38.1","2.38.2","2.38.3","2.38.4","2.39.0","2.4.0","2.40.0","2.41.0","2.42.0","2.42.1","2.43.0","2.44.0","2.45.0","2.46.0","2.46.1","2.47.0","2.47.1","2.47.2","2.47.3","2.48.0","2.49.0","2.49.1","2.49.2","2.5.0","2.50.0","2.50.1","2.51.0","2.51.1","2.52.0","2.53.0","2.53.1","2.53.2","2.53.3","2.53.4","2.53.5","2.53.6","2.6.0","2.7.0","2.8.0","2.8.1","2.9.0","3.0.0","3.0.0b1","3.0.0b2","3.0.0b3","3.0.1","3.0.2","3.10.0","3.11.0","3.12.0","3.13.0","3.14.0","3.14.1","3.141.0","3.3.0","3.3.1","3.3.2","3.3.3","3.4.0","3.4.1","3.4.2","3.4.3","3.5.0","3.6.0","3.7.0","3.8.0","3.8.1","3.9.0","4.0.0","4.0.0.a7","4.0.0.b1","4.0.0.b2","4.0.0.b2.post1","4.0.0.b3","4.0.0.b4","4.0.0.rc1","4.0.0a1","4.0.0a3","4.0.0a5","4.0.0a6","4.0.0a6.post1","4.0.0a6.post2","4.0.0rc2","4.0.0rc3","4.1.0","4.1.1","4.1.2","4.1.3","4.1.4","4.1.5","4.10.0","4.2.0","4.3.0","4.4.0","4.4.1","4.4.2","4.4.3","4.5.0","4.6.0","4.6.1","4.7.0","4.7.1","4.7.2","4.8.0","4.8.1","4.8.2","4.8.3","4.9.0","4.9.1","4.11.0","4.11.1","4.11.2","4.12.0","4.13.0","4.14.0","4.15.0","4.15.1","4.15.2","4.16.0","4.17.0","4.17.1","4.17.2","4.18.0","4.18.1","4.19.0","4.20.0","4.21.0","4.22.0","4.23.0","4.23.1","4.24.0","4.25.0","4.26.0","4.26.1","4.27.0","4.27.1","4.28.0","4.28.1","4.29.0","4.30.0","4.31.0","4.32.0","4.33.0","4.34.0","4.34.1","4.34.2","4.35.0","4.36.0"],"database_specific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/selenium/PYSEC-2023-101.yaml"}}],"schema_version":"1.7.3"}