DRUPAL-CONTRIB-2023-044

The Webprofiler module provides a way of displaying the Symfony profile debugging tool at the bottom of each page. The abbr\class Twig filter can be used to bypass the Twig auto-escape feature. This vulnerability is mitigated by the fact that it is only exposed when the filter is specifically use...

PT-2023-37031

The Webprofiler module provides a way of displaying the Symfony profile debugging tool at the bottom of each page. The abbr class Twig filter can be used to bypass the Twig auto-escape feature. This vulnerability is mitigated by the fact that it is only exposed when the filter is specifically use...

SUSE CVE-2017-7476

Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the saveabbr function in timerz.c...

Cross-site Scripting in pandao

pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element...

Cross-site Scripting (XSS)

editor.md is vulnerable to cross-site scripting XSS. The attack is possible because a user’s input in the attribute of an ABBR or SUP tags are not sanitized, allowing an attacker to inject a malicious script through it...

CVE-2019-14653

pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element...

Cross site scripting

pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element...

CVE-2019-14653

pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element...

CVE-2019-14653: Improper Neutralization of Input During Web Page Generation

pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element...

PT-2019-13758

Name of the Vulnerable Software and Affected Versions Editor.md version 1.5.0 Description The issue allows for XSS via an attribute of an ABBR or SUP element. Recommendations For version 1.5.0, update to a newer version that contains a fix for this issue...

PT-2017-17760

Name of the Vulnerable Software and Affected Versions Gnulib versions prior to 2017-04-26 Description The issue is related to a heap-based buffer overflow that occurs with the TZ environment variable. The error is specifically located in the save abbr function within the time rz.c file...