CVE-2013-6459

rubygem-will_paginate: XSS vulnerabilities

Published Dec 31, 2013 CVSS 3.0 · 4.3 Medium EPSS 2.2% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2017-0195 Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links.
Github GHSA Github GHSA GHSA-8r6h-7x9g-xmw9 will_paginate Cross-site Scripting vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 5:39 PM
Reserved
Nov 4, 2013, 12:00 AM
Status
Modified
Published
Dec 31, 2013, 4:04 PM
Modified
Jun 17, 2026, 12:00 AM
Severity
Moderate
Public date
Dec 24, 2013, 12:00 AM