43 matches found
[SECURITY] Fedora 26 Update: imageinfo-0.05-27.fc26
ImageInfo computes and displays selected image attributes. It is similar in function to the ImageMagick "identify" utility, but provides a few additional attributes such as details of embedded ICC profiles, and allows command line selection of the attributes to be computed, avoiding unnecessary...
Clicky by Yoast <= 1.5 - Minor Security Improvements
From the changelog: - Only allow expected characters in user settings thanks to a report by Netsparker. - Proper escaping of translated string in image attributes...
SA-CONTRIB-2010-057 - Rotor Banner - Cross Site Scripting (XSS)
The Rotor Banner module allows users to upload images which can then be displayed in a block and rotated through using jQuery. However, when these images are displayed, the values for the various image attributes srs, title, alt are not properly sanitized, leading to a cross site scripting XSS...