CVE-2024-28199

creationtimestamp| type| source ---|---|--- 2024-03-12 00:26:31+00:00| seen| https://t.me/ctinow/205177 2024-03-12 00:26:32+00:00| seen| https://t.me/ctinow/205178...

CVE-2024-28199 Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex

phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting XSS vulnerability that can be exploited via maliciously crafted user data. This was due to improper case-sensitivity in the code that was meant to prevent these attacks. If you...