CVE-2011-4312: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 diff viewer or 2 screenshot component...

PT-2011-4925

Name of the Vulnerable Software and Affected Versions Review Board versions prior to 1.5.7 Review Board versions 1.6.x prior to 1.6.3 Description The issue involves multiple cross-site scripting XSS vulnerabilities in the commenting system. These vulnerabilities allow remote attackers to inject...