Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the manipulation of the getvar argument in the cssgen.php file. An attacker can inject malicious scripts by manipulating the input parameter...

GeSHi 代码注入漏洞

GeSHi is a Generic Syntax Highlighter open source PHP generic syntax highlighter. A code injection vulnerability exists in GeSHi version 1.0.9.1 and earlier, which stems from incorrect manipulation of the parameters default-styles, keywords-1, keywords-2, keywords-3, keywords-4, and comments can...