yui

yui

Releases54

Frequency1 week 3 days

Last Releasealmost 12 years ago

YUI 3 Source

Log in to subscribe

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2013-4939OSV↗	= 3.8.0, = 3.5.0, = 3.8.1, = 3.6.0, = 3.1.0, = 3.2.0, = 3.10.1, = 3.0.0, = 3.1.1, = 3.7.0, = 3.7.1, = 3.7.2, = 3.9.0, = 3.10.0, = 3.1.2, = 3.3.0, = 3.4.0, = 3.10.2, = 3.4.1, = 3.5.1, = 3.9.1, = 3.7.3, < 3.10.3	Jul 29, 2013Monday, 29 July 2013, 13:59	—	4.3 MEDIUM
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL.
CVE-2013-4940OSV↗	= 3.8.0, = 3.5.0, = 3.8.1, = 3.6.0, = 3.1.0, = 3.7.1, = 3.10.0, = 3.0.0, = 3.9.0, = 3.1.1, = 3.2.0, = 3.7.0, = 3.7.2, = 3.10.1, = 3.1.2, = 3.3.0, = 3.10.2, = 3.4.0, = 3.4.1, = 3.5.1, = 3.7.3, = 3.9.1, >= 3.0.0, < 3.10.11, >= 3.10.12, < 3.10.13	Jul 29, 2013Monday, 29 July 2013, 13:59	—	4.3 MEDIUM
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. NOTE: this vulnerability exists because of a CVE-2013-4939 regression.
CVE-2013-4941OSV↗	= 3.8.0, = 3.5.0, = 3.8.1, = 3.6.0, = 3.1.0, = 3.0.0, = 3.9.0, = 3.7.1, = 3.10.0, = 3.1.1, = 3.2.0, = 3.7.0, = 3.7.2, = 3.10.1, = 3.7.3, = 3.3.0, = 3.4.0, = 3.4.1, = 3.5.1, = 3.1.2, = 3.10.2, = 3.9.1, >= 3.2.0, <= 3.9.1	Jul 29, 2013Monday, 29 July 2013, 13:59	—	4.3 MEDIUM
Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL.
CVE-2013-4942OSV↗	= 3.8.0, = 3.5.0, = 3.8.1, = 3.6.0, = 3.9.0, = 3.7.0, = 3.7.1, = 3.7.2, = 3.10.0, = 3.10.1, = 3.7.3, = 3.10.2, = 3.5.1, = 3.9.1, >= 3.2.0, <= 3.9.1	Jul 29, 2013Monday, 29 July 2013, 13:59	—	4.3 MEDIUM
Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL.