CVE-2005-0649 Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting (XSS) protection via "hexadecimal HTML entities."
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting (XSS) protection via "hexadecimal HTML entities."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pixel-apes group safehtml | <= 1.2.0 | No fix listed |
References
- pixel-apes.com
- 13869 third-party-advisory