CVE-2013-4891

The xss_clean function in CodeIgniter before 2.1.4 might allow remote attackers to bypass an intended protection mechanism and conduct cross-site scripting (XSS) attacks via an unclosed HTML tag.
Configurations

Configuration 1 (hide)

cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:56

Type Values Removed Values Added
References () https://github.com/bcit-ci/CodeIgniter/issues/4020 - Issue Tracking, Third Party Advisory () https://github.com/bcit-ci/CodeIgniter/issues/4020 - Issue Tracking, Third Party Advisory
References () https://nealpoole.com/blog/2013/07/codeigniter-21-xss-clean-filter-bypass/ - Exploit, Third Party Advisory () https://nealpoole.com/blog/2013/07/codeigniter-21-xss-clean-filter-bypass/ - Exploit, Third Party Advisory
References () https://www.codeigniter.com/userguide2/changelog.html - Release Notes () https://www.codeigniter.com/userguide2/changelog.html - Release Notes

Information

Published : 2018-02-21 16:29

Updated : 2024-11-21 01:56


NVD link : CVE-2013-4891

Mitre link : CVE-2013-4891

CVE.ORG link : CVE-2013-4891


JSON object : View

Products Affected

codeigniter

  • codeigniter
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')