Description
A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polymorphic_url`helper with untrusted user input.
Remediation
References
Related Vulnerabilities
WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk Cross-Site Scripting (5.127.3)
Internet Information Services Other Vulnerability (CVE-2002-1181)
WordPress Plugin GiveWP-Donation and Fundraising Platform PHP Object Injection (2.3.0)
WordPress Plugin MC4WP:Mailchimp for WordPress Cross-Site Scripting (4.1.6)
WordPress Plugin WP Simple Login Registration Cross-Site Scripting (1.0.2)