Vulnerabilities

TI-2015-02478 CVE-2015-2807 · GHSA-4cg7-vxw6-h39q

Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud…

LOW 30

Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud plugin before 0.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.07328 Published 2015-09-01 No fix listed CWE-79

TI-2013-01709 CVE-2013-1933 · GHSA-4fvg-pwv7-v54g

The extract_from_ocr function in lib/docsplit/text_extractor.rb in the Karteek Docsplit…

MEDIUM 44

The extract_from_ocr function in lib/docsplit/text_extractor.rb in the Karteek Docsplit (karteek-docsplit) gem 0.5.4 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01793 Published 2013-04-25 No fix listed CWE-78

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud…

The extract_from_ocr function in lib/docsplit/text_extractor.rb in the Karteek Docsplit…