CVE-2015-2986

The CVE pertains to rakuto.net hitSuji (rktSNS2) 0.2.2b, described as a cross‑site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary script or HTML via unspecified vectors. The NVD/NIST entries report a base CVSSv2 score of 4.3 (Medium), with impact limited to pa...

CVE-2015-2986: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in rakuto.net hitSuji rktSNS2 0.2.2b allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-6032

Name of the Vulnerable Software and Affected Versions rktSNS2 version 0.2.2b Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations For version 0.2.2b, at the moment, there is no...