DRUPAL-CONTRIB-2023-044

The Webprofiler module provides a way of displaying the Symfony profile debugging tool at the bottom of each page. The abbr\class Twig filter can be used to bypass the Twig auto-escape feature. This vulnerability is mitigated by the fact that it is only exposed when the filter is specifically use...

SUSE CVE-2017-7476

Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the saveabbr function in timerz.c...

Cross-site Scripting in pandao

pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element...

Cross-site Scripting (XSS)

editor.md is vulnerable to cross-site scripting XSS. The attack is possible because a user’s input in the attribute of an ABBR or SUP tags are not sanitized, allowing an attacker to inject a malicious script through it...

CVE-2019-14653

pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element...

Cross site scripting

pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element...