Vulnerability in Pixel-Apes Group Safehtml

CVE-2005-1638

The _writeAttrs function in SafeHTML before 1.3.2 does not properly handle quotes in attribute values, which could allow remote attackers to exploit cross-site scripting (XSS) vulnerabilities in applications that rely on SafeHTML for protection.

EPSS: 0.012 (64.9th percentile) — read the EPSS interpretation.

Affected products

Pixel-apes_group Safehtml — versions 1.1.0, 1.2.0, 1.2.1
N/a — versions n/a

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)