Skip to content
OpenAdvisories
Unscored DSA-249 2 CVEs

w3mmee - missing HTML quoting

Published Feb 11, 2003 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 w3mmee 0.3-2.4

Vulnerabilities 2

  • Unscored —

    Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attac…

  • Unscored —

    w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote atta…