Cross-site Scripting (XSS) in Guiiii-m/example-ruby (master)

[Guiiii-m]

Cross-site Scripting (XSS) in Guiiii-m/example-ruby (master)

Issue Details

• Vulnerability: Cross-site Scripting (XSS)
• Severity: Medium
• Project: Guiiii-m/example-ruby
• Branch: master
• Scan Date: Unknown

Issue Description

rails-html-sanitizer is vulnerable to cross-site scripting (XSS) attacks. Attackers can use non-whiltelisted attributes within sanitized output to inject and execute arbitrary webscript.

View more details