Description

A cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 Beta and release candidates before 2.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

Upgrade to the latest version of GWT or apply the patch provided by the vendor.

References

Release Notes for 2.4.0

Related Vulnerabilities

WordPress 4.1.x Cross-Site Scripting Vulnerability (4.1 - 4.1.8)

WordPress Plugin GeoDirectory-WordPress Business Directory and Classified Ads Listings Cross-Site Scripting (2.2.21)

WordPress Plugin AStickyPostOrderER Cross-Site Scripting (0.3.1)

WordPress Plugin External Links-nofollow, noopener & new window Multiple Cross-Site Scripting Vulnerabilities (1.80)

WordPress Plugin Limit Login Attempts Reloaded Cross-Site Scripting (2.15.2)

Severity

High

Classification

CVE-2012-4563 CWE-80 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

XSS