Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links.

Project Subscriptions

Vendors Products
Mislav Marohnic Subscribe
Will Paginate Subscribe
Satellite Subscribe
Satellite Capsule Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2017-0195 Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links.
Github GHSA Github GHSA GHSA-8r6h-7x9g-xmw9 will_paginate Cross-site Scripting vulnerability
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-06T17:39:01.443Z

Reserved: 2013-11-04T00:00:00

Link: CVE-2013-6459

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2013-12-31T16:04:23.447

Modified: 2025-04-11T00:51:21.963

Link: CVE-2013-6459

cve-icon Redhat

Severity : Moderate

Publid Date: 2013-12-24T00:00:00Z

Links: CVE-2013-6459 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses