Vulnerabilities

TI-2005-01547 CVE-2005-1638 · GHSA-h32q-7jfw-fq6v

The _writeAttrs function in SafeHTML before 1.3.2 does not properly handle quotes in…

LOW 22

The _writeAttrs function in SafeHTML before 1.3.2 does not properly handle quotes in attribute values, which could allow remote attackers to exploit cross-site scripting (XSS) vulnerabilities in applications that rely on…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01195 Published 2005-05-17 No fix listed

TI-2005-00599 CVE-2005-0649 · GHSA-xrg5-hv44-2h7r

Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting…

LOW 23

Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting (XSS) protection via "hexadecimal HTML entities."

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01274 Published 2005-03-04 No fix listed

TI-2005-00598 CVE-2005-0648 · GHSA-c76g-rxhg-rm53

Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to…