Description
The xss_clean function in CodeIgniter before 2.1.4 might allow remote attackers to bypass an intended protection mechanism and conduct cross-site scripting (XSS) attacks via an unclosed HTML tag.
Unscored
CVE-2013-4891
EUVD-2013-4736GHSA-mq3g-6f5h-64x7
The xss_clean function in CodeIgniter before 2.1.4 might allow remote attackers to bypass an intended protection mechanism and conduct cros…
Published Feb 21, 2018 · Updated Aug 6, 2024 · Assigned by mitre