Skip to content
OpenAdvisories

Package · RubyGems

avo

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-22411 Public exploit

    Cross site scripting in Action messages on Avo

    Avo is a framework to create admin panels for Ruby on Rails apps. In Avo 3 pre12, any HTML inside text that is passed to `error` or `succeed` in an `Avo::BaseAction` subclass will be rendered directly without sanitization in the toast/notification that appear…

    avo-hq avo avo RubyGems