Cross site scripting

Cross-site Scripting XSS in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary web script or html via the easyxdm.swf file...

CVE-2013-5212

CVE-2013-5212 affects the easyXDM library (pre-2.4.18). The Flash transport implemented in easyxdm.swf could be fed injected parameters via ExternalInterface.call(), enabling XSS in HTML documents that use EasyXDM.Socket/Rpc. The vulnerability arises from improper encoding of inputs sent to the F...

easyXDM 2.4.16 Cross Site Scripting

Affected products ================= easyXDM library = 2.4.16 - http://easyxdm.net/wp/ easyXDM is a Javascript library that enables you as a developer to easily work around the limitation set in place by the Same Origin Policy, in turn making it easy to communicate and expose javascript API’s acro...