Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the manipulation of the getvar argument in the cssgen.php file. An attacker can inject malicious scripts by manipulating the input parameter...

GeSHi Code Injection Vulnerability

GeSHi is a Generic Syntax Highlighter open source PHP generic syntax highlighter. A code injection vulnerability exists in GeSHi version 1.0.9.1 and earlier, which stems from incorrect manipulation of the parameters default-styles, keywords-1, keywords-2, keywords-3, keywords-4, and comments can...