CVE-2020-36190

Published January 12th, 2021

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.

railsadminteam/rails_admin

RailsAdmin is a Rails engine that provides an easy-to-use interface for managing your data

GitHub

7.96K