6 matches found
DRUPAL-CONTRIB-2023-044
The Webprofiler module provides a way of displaying the Symfony profile debugging tool at the bottom of each page. The abbr\class Twig filter can be used to bypass the Twig auto-escape feature. This vulnerability is mitigated by the fact that it is only exposed when the filter is specifically use...
SUSE CVE-2017-7476
Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the saveabbr function in timerz.c...
Cross-site Scripting in pandao
pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element...
Cross-site Scripting (XSS)
editor.md is vulnerable to cross-site scripting XSS. The attack is possible because a user’s input in the attribute of an ABBR or SUP tags are not sanitized, allowing an attacker to inject a malicious script through it...
