Cross-site scripting in padrino-contrib

2019-09-2318:33:07

Google

osv.dev

0.001 Low

EPSS

Percentile

33.8%

JSON

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption.

CPENameOperatorVersion
padrino-contribeq0.1.10
padrino-contribeq0.1.6
padrino-contribeq0.0.4
padrino-contribeq0.1.9
padrino-contribeq0.1.8
padrino-contribeq0.0.3
padrino-contribeq0.1.12
padrino-contribeq0.0.2
padrino-contribeq0.0.6
padrino-contribeq0.1.4

Name	Operator	Version
padrino-contrib	eq	0.1.10
padrino-contrib	eq	0.1.6
padrino-contrib	eq	0.0.4
padrino-contrib	eq	0.1.9
padrino-contrib	eq	0.1.8
padrino-contrib	eq	0.0.3
padrino-contrib	eq	0.1.12
padrino-contrib	eq	0.0.2
padrino-contrib	eq	0.0.6
padrino-contrib	eq	0.1.4