Description

Cross-site scripting (XSS) vulnerability in Ember.js 1.10.x before 1.10.1 and 1.11.x before 1.11.2.

Remediation

References

CVE-2015-1866

Related Vulnerabilities

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-0361)

WordPress Plugin TheCartPress eCommerce Shopping Cart Order Information Security Bypass (1.1.9.2)

WordPress Plugin Backup and Staging by WP Time Capsule PHP Object Injection (1.21.9)

Nginx Other Vulnerability (CVE-2016-0746)

Oracle JRE CVE-2013-2444 Vulnerability (CVE-2013-2444)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2015-1866