CVE-2019-16145

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

EUVD-2019-0677

Malware in sbrugna...

GHSA-RWPR-83G3-96G7 Cross-site scripting in padrino-contrib

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

Cross-site scripting in padrino-contrib

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

padrino-contrib XSS via caption parameter of breadcrumbs helper

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

CVE-2019-16145

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

CVE-2019-16145

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

Cross site scripting

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

CVE-2019-16145

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption...

CVE-2019-16145

CVE-2019-16145 affects the padrino-contrib breadcrumbs module (up to version 0.2.0) used with Padrino Framework. The root cause is an XSS in the caption parameter of breadcrumbs.rb that is not properly escaped, allowing script injection. This can enable an attacker to steal session tokens or perf...