Lucene search
PRIOn knowledge basePRION:CVE-2016-10547HistoryMay 31, 2018 - 8:29 p.m.
Cross site scripting
2018-05-3120:29:00
PRIOn knowledge base
www.prio-n.com
1
Nunjucks is a full featured templating engine for JavaScript. Versions 2.4.2 and lower have a cross site scripting (XSS) vulnerability in autoescape mode. In autoescape mode, all template vars should automatically be escaped. By using an array for the keys, such as name[]=<script>alert(1)</script>, it is possible to bypass autoescaping and inject content into the DOM.
Related
cvelist
cvelist
CVE-2016-10547
2018-04-26 00:00:00
osv
osv
Cross-Site Scripting in nunjucks
2018-11-06 23:13:37
CVE-2016-10547
2018-05-31 20:29:01
cve
cve
CVE-2016-10547
2018-05-31 20:29:01
nvd
nvd
CVE-2016-10547
2018-05-31 20:29:01
github
github
Cross-Site Scripting in nunjucks
2018-11-06 23:13:37
nodejs
nodejs
Cross-Site Scripting
2016-09-08 14:56:42