Lucene search
+L

1 matches found

OSV
OSV
added 2022/03/02 10:24 p.m.48 views

GHSA-CM9W-C4RJ-R2CF Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in view_component

This is an XSS vulnerability that has the potential to impact anyone using translations with the viewcomponent gem. Data received via user input and passed as an interpolation argument to the translate method is not properly sanitized before display. Versions 2.29.1 and 2.49.1 have been released...

8.1CVSS6.8AI score0.01092EPSS
SaveExploits0References7
Rows per page
Query Builder