Cross-site scripting (XSS) vulnerability in the HTML... · CVE-2015-5667 · GitHub Advisory Database · GitHub

Cross-site scripting (XSS) vulnerability in the HTML...

Low severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Jan 27, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Cross-site scripting (XSS) vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment.

References

Published by the National Vulnerability Database

Oct 31, 2015

Published to the GitHub Advisory Database May 17, 2022

Last updated Jan 27, 2023