ActionView escape_javascript XSS

The vulnerability of the escapejavascript function in the javascripthelper.rb component of the ActionView programming platform for the Ruby on Rails framework is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow an...

DEBIAN-CVE-2020-5267

In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the j or escapejavascript methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2...

PT-2020-5648

Name of the Vulnerable Software and Affected Versions ActionView versions prior to 6.0.2.2 and 5.2.4.2 Description There is a possible cross-site scripting XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the j or escape javascript methods may be susceptible to...