CVE-2018-20975

Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...

The vulnerability of the MediaInfoLib::File__Tags_Helper::Synched_Test function (Tag/File__Tags.cpp) in the MediaInfo metadata reading library allows a attacker to cause a service failure.

The vulnerability of the MediaInfoLib::FileTagsHelper::SynchedTest function Tag/FileTags.cpp, which is part of the MediaInfo metadata reading library, relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause servi...

Cross-site scripting in fat_free_crm

Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...

GHSA-4P8F-MMFJ-R45G Cross-site scripting in fat_free_crm

Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...

Design/Logic Flaw

Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...

PT-2019-10412

Name of the Vulnerable Software and Affected Versions Fat Free CRM versions prior to 0.18.1 Description The issue is related to a Cross-Site Scripting XSS flaw in the tags helper located in app/helpers/tags helper.rb. This allows for potential malicious script injection. Recommendations For...

PT-2012-4735

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions prior to 2.3.16 Ruby on Rails versions 3.0.x through 3.0.16 Ruby on Rails versions 3.1.x through 3.1.7 Ruby on Rails versions 3.2.x through 3.2.7 Description A cross-site scripting XSS issue exists in the strip tags help...