Description

A cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 Beta and release candidates before 2.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

Upgrade to the latest version of GWT or apply the patch provided by the vendor.

References

Release Notes for 2.4.0

Related Vulnerabilities

WordPress Plugin Featured Content 'param' Parameter Cross-Site Scripting (0.0.1)

WordPress Plugin SMS Alert Order Notifications-WooCommerce Cross-Site Scripting (3.4.6)

WordPress Plugin NextScripts:Social Networks Auto-Poster Cross-Site Scripting (3.4.17)

Drupal Core 5.x Cross-Site Scripting (5.0 - 5.5)

WordPress Plugin Newsletters Cross-Site Scripting (4.6.18)

Severity

High

Classification

CVE-2012-4563 CWE-80 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

XSS