Networking
Monthly
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.