CVE-2011-4312

Published November 24th, 2011

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) diff viewer or (2) screenshot component.

reviewboard/reviewboard

An extensible and friendly code review tool for projects and companies of all sizes.

GitHub

1.72K