Description
Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Remediation
References
http://jvn.jp/en/jp/JVN52422792/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000118
Related Vulnerabilities
CVE-2013-7370 Vulnerability in npm package connect
CVE-2023-25827 Vulnerability in maven package net.opentsdb:opentsdb
CVE-2016-10547 Vulnerability in maven package org.webjars.npm:nunjucks
CVE-2023-25762 Vulnerability in maven package org.jenkins-ci.plugins:pipeline-build-step
CVE-2022-31192 Vulnerability in maven package org.dspace:dspace-jspui