CVE-2017-8920

irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka XSS...

CVE-2017-8920: Improper Neutralization of Input During Web Page Generation

irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka XSS...

PT-2017-18624

Name of the Vulnerable Software and Affected Versions CGI:IRC versions prior to 0.5.12 Description The issue concerns a lack of proper output encoding for user-supplied input from the R parameter in irc.cgi, which can lead to XSS. Recommendations For versions prior to 0.5.12, update to version...