Skip to content
Threat Feed
Subscribe

Tag

Client-Side-Vulnerability

2 briefs RSS
high advisory

Twine 2 Cross-Site Scripting to Remote Code Execution

Twine 2 desktop versions through 2.12.0 contain a cross-site scripting flaw in the importStories function that can be leveraged via an IPC bridge to achieve arbitrary code execution.

Twine cross-site-scripting rce client-side-vulnerability
1r 2t 1c
high advisory

Anonymous GitHub Vulnerable to XSS via Unsanitized GitHub Repository Content

The @tdurieux/anonymous_github application is vulnerable to cross-site scripting (XSS) because it renders unsanitized content from GitHub repositories, allowing a malicious GitHub repository to execute arbitrary JavaScript in the Anonymous GitHub origin.

github.com +1 xss github unsanitized-input client-side-vulnerability
2r 1t