PT-2013-6039

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions 4.0.0 through 4.0.1 Description A cross-site scripting XSS issue exists in the simple format helper, located in actionpack/lib/action view/helpers/text helper.rb, allowing remote attackers to inject arbitrary web script ...