CVE-2005-1638 The _writeAttrs function in SafeHTML before 1.3.2 does not properly handle quotes in attribute values, which could allow remote attackers to exploit cross-site scripting (XSS) vulnerabilities in appli...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The _writeAttrs function in SafeHTML before 1.3.2 does not properly handle quotes in attribute values, which could allow remote attackers to exploit cross-site scripting (XSS) vulnerabilities in applications that rely on SafeHTML for protection.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pixel-apes group safehtml | = 1.1.0 | No fix listed |
| pixel-apes group safehtml | = 1.2.0 | No fix listed |
| pixel-apes group safehtml | = 1.2.1 | No fix listed |
| pixel-apes group safehtml | = 1.3.0 | No fix listed |
| pixel-apes group safehtml | = 1.3.1 | No fix listed |
References
- pixel-apes.com patch
- 15371 third-party-advisory
- 16612 vdb-entry