Unscored CVE-2007-1768 EUVD-2007-1762GHSA-jppr-g346-r5pr

Cross-site scripting (XSS) vulnerability in app/helpers/application_helper.rb in Mephisto 0.7.3 and Mephisto Edge 20070325 allows remote at…

Published Mar 30, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in app/helpers/application_helper.rb in Mephisto 0.7.3 and Mephisto Edge 20070325 allows remote attackers to inject arbitrary web script or HTML via the author name field in a comment.

References

23137 vdb-entry
20070325 Mephisto blog is vulnerable to XSS mailing-list
2490 third-party-advisory
35309 vdb-entry
mephisto-authorname-xss(33230) vdb-entry