CVE-2019-16145 (padrino-contrib): padrino-contrib XSS via caption parameter of breadcrumbs helper

September 23rd, 2019

ADVISORIES

GEM

padrino-contrib

SEVERITY

CVSS v3.x: 6.1 (Medium)

PATCHED VERSIONS

None.

DESCRIPTION

The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption.