Unscored CVE-2013-2311 EUVD-2013-2257GHSA-5wj6-jfcv-m6c3

Cross-site scripting (XSS) vulnerability in static/js/share.js (aka the social bookmarking widget) in Web2py before 2.3.1 allows remote att…

Published May 22, 2013 · Updated Sep 17, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in static/js/share.js (aka the social bookmarking widget) in Web2py before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

JVN#10461119 third-party-advisory
[web2py] 20121214 web2py 2.3.1 is out mailing-list
JVNDB-2013-000040 third-party-advisory