Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the langwiz.php file. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an otherwise trusted website. The injected script gets...

Cross site scripting

Cross-site scripting XSS vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-3522

Cross-site scripting XSS vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-3522

GeSHi contains an XSS vulnerability (CVE-2012-3522) in contrib/langwiz.php, affecting GeSHi prior to 1.0.8.11. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors due to insufficient input sanitization in the langwiz example script. Multiple sources (N...

CVE-2012-3522: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...