Description

Cross-site scripting (XSS) vulnerability in Ember.js 1.10.x before 1.10.1 and 1.11.x before 1.11.2.

Remediation

References

CVE-2015-1866

Related Vulnerabilities

WordPress Plugin 404page-your smart custom 404 error page Cross-Site Request Forgery (10.3)

Oracle Database Server CVE-2006-3701 Vulnerability (CVE-2006-3701)

OpenSSL Resource Management Errors Vulnerability (CVE-2015-1792)

Oracle Database Server Other Vulnerability (CVE-2007-0277)

WordPress Plugin AllWebMenus WordPress Menu 'abspath' Parameter Remote File Include (1.1.3)

Severity

Medium

Classification

CVE-2015-1866 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities