Skip to content
OpenAdvisories

Vendor

phlex-ruby

3 known vulnerabilities.

Products

phlex 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2024-32970

    Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex

    Phlex is a framework for building object-oriented views in Ruby. In affected versions there is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. Since the last two vulnerabilities https://github.com/…

    phlex-ruby phlex phlex RubyGems
  • High 7.1
    CVE-2024-32463

    phlex makes Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tags

    phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. The filter to detect and prevent the use of the `javascript:` …

    phlex-ruby phlex phlex RubyGems
  • High 7.1
    CVE-2024-28199

    Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex

    phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. This was due to improper case-sensitivity in the code that was…

    phlex-ruby phlex phlex RubyGems