A stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00641·Published 2020-11-09·Fixed in 1.3.2CWE-79