Description

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

Remediation

References

CVE-2013-0256

Related Vulnerabilities

WordPress Plugin Site Offline Or Coming Soon Or Maintenance Mode Security Bypass (1.5.2)

Magento Improper Privilege Management Vulnerability (CVE-2020-9630)

WordPress Plugin Social Auto Poster-WordPress Scheduler & Marketing Cross-Site Scripting (5.3.14)

Drupal Use of Web Browser Cache Containing Sensitive Information Vulnerability (CVE-2025-13083)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16725)

Severity

Medium

Classification

CVE-2013-0256 CWE-707

Tags

Missing Update Known Vulnerabilities