CVE-2013-6430

The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain characters, which allows remote attackers to conduct cross-site scripting XSS attacks via a 1 line separator or 2 paragraph separator Unicod...

PT-2020-7548

Name of the Vulnerable Software and Affected Versions: Spring Framework versions prior to 3.2.2 Description: The issue allows remote attackers to conduct cross-site scripting XSS attacks via specific Unicode characters, including line separator, paragraph separator, left angle bracket, or right...