Description

A cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 Beta and release candidates before 2.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

Upgrade to the latest version of GWT or apply the patch provided by the vendor.

References

Release Notes for 2.4.0

Related Vulnerabilities

WordPress Plugin BackWPup Cross-Site Scripting (3.0.12)

WordPress Plugin WP Shopify Cross-Site Scripting (2.0.4)

WordPress Plugin Popup by Supsystic Cross-Site Scripting (1.10.4)

Joomla! Core 3.4.x Cross-Site Scripting (3.4.0 - 3.4.3)

WordPress Plugin WordPress Simple Shopping Cart Cross-Site Scripting (4.6.1)

Severity

High

Classification

CVE-2012-4563 CWE-80 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

XSS