EUVD-2018-19729

Malware in sbrugna...

Sencha Ext JS Cross-Site Scripting Vulnerability

Sencha Ext JS is a JavaScript-based application framework . The framework supports the use of Ajax, DHTML and DOM scripts to build interactive cross-platform Web applications . A cross-site scripting vulnerability exists in the getTip method of Action Columns in Sencha Ext JS versions 4 through 6...

CVE-2018-8046

The getTip method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip method of Action Column...

PT-2018-18404

Name of the Vulnerable Software and Affected Versions: Sencha Ext JS versions 4 through 6.5.3 Description: The issue concerns the getTip method of Action Columns, which is susceptible to cross-site scripting XSS attacks. This occurs even when HTML-escaped data is passed, as the method un-escapes...

CVE-2018-8046: Improper Neutralization of Input During Web Page Generation

The getTip method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip method of Action Column...