Python-based e-commerce platform did not escape returned content on error pages, allowing for reflected Cross-Site Scripting attacks.
CVE-2021-1879
Universal XSS in mobile operating system, as exploited in the wild per CISA KEV.
CVE-2020-3580