2 matches found
CVE-2013-0234
Cross-site scripting XSS vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remote attackers to inject arbitrary web script or HTML via the paramstwitterusername parameter to action/widgets/save...
6.3CVSS0.01457EPSS
SaveExploits1References8
CVE-2013-0234: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remote attackers to inject arbitrary web script or HTML via the paramstwitterusername parameter to action/widgets/save...
4.3CVSS6AI score0.01457EPSS
SaveExploits1References2
20