CVE-2018-16516: Flask-Admin Project Flask-Admin

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL.

Affected products

• Flask-Admin Project Flask-Admin: version 1.5.2 only

Published 2018-09-05. Last modified 2026-06-17.