Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2022/05/01 6:14 p.m.11 views

HTML Purifier Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped printr output."...

4.3CVSS6AI score0.00333EPSS
Exploits0References7Affected Software1
Prion
Prion
added 2007/06/29 6:30 p.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped printr output."...

4.3CVSS6.1AI score0.00333EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2007/06/29 6:0 p.m.16 views

CVE-2007-3498

Cross-site scripting XSS vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped printr output."...

5.6AI score0.00333EPSS
Exploits0References4
CVE
CVE
added 2007/06/29 6:0 p.m.42 views

CVE-2007-3498

The CVE concerns HTML Purifier prior to 2.0.1, specifically a cross-site scripting (XSS) issue in smoketests/configForm.php. The root cause is an unescaped print_r output, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected software is the HTML Purif...

4.3CVSS5.7AI score0.00333EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder