CVE-2015-9260

An issue was discovered in BEdita before 3.7.0. A cross-site scripting XSS attack occurs via a crafted pages/showObjects URI, as demonstrated by appending a payload to a pages/showObjects/2/0/0/leafs URI...

CVE-2015-9260: Improper Neutralization of Input During Web Page Generation

An issue was discovered in BEdita before 3.7.0. A cross-site scripting XSS attack occurs via a crafted pages/showObjects URI, as demonstrated by appending a payload to a pages/showObjects/2/0/0/leafs URI...

PT-2018-4571

Name of the Vulnerable Software and Affected Versions BEdita versions prior to 3.7.0 Description A cross-site scripting XSS issue was found, allowing an attack via a crafted URI. Specifically, this occurs with the pages/showObjects URI, for example by appending a payload to a...