mislav/will_paginate · Security
will_paginate Cross-site Scripting vulnerability
- GHSA ID
- GHSA-8r6h-7x9g-xmw9
- CVE ID
- CVE-2013-6459
- Severity
- medium
- Published
- Updated
Description
Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links.
CWEs
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')