Description

A cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 Beta and release candidates before 2.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

Upgrade to the latest version of GWT or apply the patch provided by the vendor.

References

Release Notes for 2.4.0

Related Vulnerabilities

WordPress Plugin Article Directory Cross-Site Scripting (1.3)

WordPress Plugin Border Loading Bar Cross-Site Scripting (1.0.1)

WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (5.0.05)

WordPress Plugin Persian Woocommerce SMS Cross-Site Scripting (3.3.2)

WordPress Plugin Cookie Law Bar Cross-Site Scripting (1.2.1)

Severity

High

Classification

CVE-2012-4563 CWE-80 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

XSS