Description
The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | padrino-contrib | <= 0.2.0 | — | GHSA-rwpr-83g3-96g7 |
Medium · 6.1
CVE-2019-16145
EUVD-2019-0677GHSA-rwpr-83g3-96g7
Cross-site scripting in padrino-contrib
Published Sep 9, 2019 · Updated Aug 5, 2024 · Assigned by mitre