EUVD-2020-0287

Malware in sbrugna...

CVE-2020-5241

matestack-ui-core RubyGem before 0.7.4 is vulnerable to XSS/Script injection. This vulnerability is patched in version 0.7.4...

Cross-Site Scripting (XSS)

matestack-ui-core is vulnerable to cross-site scripting XSS. The vulnerability exists as the Cell class does not escape strings by default...

CVE-2020-5241

matestack-ui-core RubyGem before 0.7.4 is vulnerable to XSS/Script injection. This vulnerability is patched in version 0.7.4...

CVE-2020-5241

CVE-2020-5241 affects matestack-ui-core (RubyGem) up to version 0.7.3; the vulnerability is Cross‑Site Scripting (XSS) / Script injection due to strings not being escaped by default. The issue is fixed in 0.7.4. Public sources from NVD, Red Hat, Veracode, and CVE records consistently describe the...

CVE-2020-5241 XSS/Script injection vulnerability in matestack

matestack-ui-core RubyGem before 0.7.4 is vulnerable to XSS/Script injection. This vulnerability is patched in version 0.7.4...

GHSA-3JQW-VV45-MJHH XSS/Script injection vulnerability in matestack

matestack-ui-core RubyGem before 0.7.4 is vulnerable to XSS/Script injection. This vulnerability is patched in version 0.7.4...

XSS/Script injection vulnerability in matestack

matestack-ui-core RubyGem before 0.7.4 is vulnerable to XSS/Script injection. This vulnerability is patched in version 0.7.4...

matestack-ui-core is vulnerable to XSS/Script injection

matestack-ui-core does not excape strings by default and does not cover this in the docs. matestack-ui-core should escape strings by default in order to prevent XSS/Script injection vulnerability. v0.7.4 fixes that by escaping strings by default...