Description
Cross-site scripting (XSS) vulnerability in cake/libs/error.php in CakePHP before 1.1.7.3363 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in a 404 ("Not Found") error page. NOTE: some of these details are obtained from third party information.
Remediation
References
Related Vulnerabilities
MySQL CVE-2012-3147 Vulnerability (CVE-2012-3147)
GibbonEdu Deserialization of Untrusted Data Vulnerability (CVE-2024-24725)
MediaWiki CVE-2023-37305 Vulnerability (CVE-2023-37305)
WordPress Plugin Tutor LMS-eLearning and online course solution Local File Inclusion (1.8.7)
WordPress Plugin Slimstat Analytics Cross-Site Scripting (3.9.1)