CVE-2009-4924

Dan Pascu python-cjson 1.0.5 does not properly handle a '/' argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting XSS attacks involving Firefox and the end tag of a SCRIPT element...

CVE-2009-4924

The provided connected documents confirm that CVE-2009-4924 affects python-cjson 1.0.5, where an improper handling of the '/' argument to cjson.encode can enable certain cross-site scripting (XSS) attacks involving Firefox and the end tag of a SCRIPT element. The vulnerability is described consis...