3 matches found
CVE-2010-4659
Cross-site scripting (XSS) vulnerability in statusnet through 2010 in error message contents.
CVE-2010-4660
Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes..
CVE-2011-3370
statusnet before 0.9.9 has XSS