CVE-2016-3942

Affected versions of "jsrender" are susceptible to a remote code execution vulnerability when used with server delivered client-side tempates which dynamically embed user input...

Template Injection in jsrender

Affected versions of jsrender are susceptible to a remote code execution vulnerability when used with server delivered client-side tempates which dynamically embed user input. Proof of Concept js //POC-REQUEST for x!=1?constructor.constructor"return arguments.callee.caller":y10 :data /for js...

GHSA-R87W-47M8-22W3 Template Injection in jsrender

Affected versions of jsrender are susceptible to a remote code execution vulnerability when used with server delivered client-side tempates which dynamically embed user input. Proof of Concept js //POC-REQUEST for x!=1?constructor.constructor"return arguments.callee.caller":y10 :data /for js...

PT-2020-8034

Name of the Vulnerable Software and Affected Versions: jsrender versions prior to 0.9.74 Description: The issue allows for remote code execution when jsrender is used with server-delivered client-side templates that dynamically embed user input. This can be exploited through specific template...

Template Injection

Overview Affected versions of jsrender are susceptible to a remote code execution vulnerability when used with server delivered client-side tempates which dynamically embed user input. Proof of Concept for x!=1?constructor.constructor"return arguments.callee.caller":y10 :data /for function...