CVE-2016-1143 Cross-site scripting (XSS) vulnerability in main.rb in Vine MV before 2015-11-08 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 6.1
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in main.rb in Vine MV before 2015-11-08 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vine mv project vine mv | <= 2015-09-09 | No fix listed |
References
- JVN#12165579 third-party-advisory vendor-advisory
- JVNDB-2016-000016 third-party-advisory vendor-advisory
- github.com patch