Cross-site scripting (XSS) vulnerability in the JsonBuilder implementation in ProjectForge before 5.3 allows remote authenticated users to inject arbitrary web script or HTML via an autocompletion string, related to web/core/JsonBuilder.java and web/wicket/autocompletion/PFAutoCompleteBehavior.java.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2014-01-02T11:00:00

Updated: 2024-08-06T18:01:20.123Z

Reserved: 2014-01-01T00:00:00

Link: CVE-2013-7250

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2014-01-02T14:59:04.237

Modified: 2024-11-21T02:00:34.060

Link: CVE-2013-7250

cve-icon Redhat

No data.