Cross-site Scripting (XSS)

keynote is vulnerable to cross-site scripting. The vulnerability exists because the attrstos function of rumble.rb does not properly escape the quotes in attributes, allowing an attacker to inject and execute malicious JavaScript...