CVE-2013-6837

The CVE describes a Cross-site Scripting (XSS) vulnerability in the setTimeout function of js/jquery.prettyPhoto.js for prettyPhoto 3.1.4 and earlier. The flaw allows an attacker to inject arbitrary script or HTML via a crafted PATH_INTO to the default URI. Affected component: prettyPhoto (JavaSc...