select2.nqu.edu.tw XSS vulnerability

Vulnerable URL: http://select2.nqu.edu.tw/kmkuas/system/sys00100.jsp?aa=0=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3Eagpro/ag222.jsp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Select2 Field Widget - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-173

Select2 Field Widget module enables you to use the select2 library for field widgets. The module doesn't sufficiently sanitize some user supplied text, leading to a reflected Cross Site Scripting vulnerability XSS. CVE identifiers issued ACVE identifier will be requested, and added upon issuance,...