CVE-2013-6416

Cross-site scripting (XSS) vulnerability in the simple_format helper in actionpack/lib/action_view/helpers/text_helper.rb in Ruby on Rails 4.x before 4.0.2…

published December 7, 2013

CVSS
—
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the simple_format helper in actionpack/lib/action_view/helpers/text_helper.rb in Ruby on Rails 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML attribute.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01963 · 80.2th percentile
Published
2013-12-07T00:00Z
EPSS history
Timeline
  • 07 DEC 00:00Z
    Cross-site scripting (XSS) vulnerability in the simple_format helper in actionpack/lib/action_view/helpers/text_helper.rb in Ruby on Rails 4.x before 4.0.2…
    cvelistv5