Skip to content
OpenAdvisories
Unscored DSA-251 2 CVEs

w3m - missing HTML quoting

Published Feb 14, 2003 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 w3m 0.3-2.4

Vulnerabilities 2

  • Unscored —

    Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attac…

  • Unscored —

    w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote atta…