XSS in Web2py

CVE-2013-2311

Cross-site scripting (XSS) vulnerability in static/js/share.js (aka the social bookmarking widget) in Web2py before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.012 (64.5th percentile) — read the EPSS interpretation.

Affected products

  • Web2py — versions 1.16.0, 1.17.0, 1.18.0
  • N/a — versions n/a

Weakness classification (CWE)

References