TI-2012-05389 CVE-2012-6684 · GHSA-r23g-3qw4-gfh2Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and…Priority LOW 24Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02253 · Published 2015-01-08 · Partial fix · 4.3.0 CWE-79