CVE-2013-4795 — Cross-site Scripting in Review Board

CWE-79 — Cross-site Scripting2 documents2 sources
Severity
4.3MEDIUMNVD
EPSS
0.5%
top 33.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Reviewboard Review Board
Timeline
PublishedApr 11
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user full name.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDreviewboard/review_board25 versions+24

🔴Vulnerability Details

1
GHSA
GHSA-xhxw-wjgx-9674: Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1↗2022-05-17
▶