medium6.1
CVE-2019-16145
Cross-site scripting in padrino-contrib
Impact
The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rubygems | padrino-contrib | <= 0.2.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Padrinorb | Padrino-Contrib | through 0.2.0 |