GeSHi vulnerable to Cross-site Scripting

Description

References

• nvd.nist.gov/vuln/detail/CVE-2012-3522 · ADVISORY
• GeSHi/geshi-1.0 · PACKAGE
• lists.fedorahosted.org/archives/list/[email protected]/message/AE33KOZ42XXG6DSH5SNGOTC3NS7FWZ2I · WEB
• lists.fedorahosted.org/archives/list/[email protected]/message/H2R65LEAIDK6I53IYGZWDCRETBYKNUKF · WEB
• lists.fedorahosted.org/archives/list/[email protected]/message/JA5TA3T7AJXWM4QMI62LMGW62WZUULGB · WEB
• sourceforge.net/p/geshi/code/2508 · WEB
• openwall.com/lists/oss-security/2012/08/21/11 · WEB
• lists.fedoraproject.org/pipermail/package-announce/2013-May/105247.html
• lists.fedoraproject.org/pipermail/package-announce/2013-May/105273.html

Mais vulnerabilidades de geshi/geshi

• CVE-2025-2123MÉDIO 6.1A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function get_var …
• CVE-2012-3521MÉDIO 5.0Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary …