Description
Cross-site scripting (XSS) vulnerability in the simple_format helper in actionpack/lib/action_view/helpers/text_helper.rb in Ruby on Rails 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML attribute.
Remediation
References
Related Vulnerabilities
WordPress Plugin Breadcrumb NavXT Information Disclosure (6.1.0)
TYPO3 CVE-2024-25118 Vulnerability (CVE-2024-25118)
Nexus Repository Manager Incorrect Authorization Vulnerability (CVE-2018-16620)
Python Data Processing Errors Vulnerability (CVE-2013-7440)
Apache HTTP Server Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-58098)