CVE-2014-5027

Cross-site scripting XSS vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via a query parameter to a diff fragment page...

CVE-2014-5027: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via a query parameter to a diff fragment page...

PT-2014-6259

Name of the Vulnerable Software and Affected Versions Review Board versions 1.7.x through 1.7.26 Review Board versions 2.0.x through 2.0.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a query parameter to a diff fragment page...