CVE-2019-12313

XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element...

CVE-2019-12313

creationtimestamp| type| source ---|---|--- 2019-05-24 14:48:22+00:00| seen| https://t.me/cvemitreorg/283...

CVE-2019-12313

XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element...

CVE-2019-12313

CVE-2019-12313 affects the Shave JavaScript plugin. Multiple sources confirm a Cross-Site Scripting vulnerability in versions before 2.5.3 caused by mishandled output encoding during the overwrite of an HTML element. The in-scope impact is XSS on client browsers when provided encoded HTML input i...