Cross site scripting

2018-02-2116:29:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.8%

JSON

The xss_clean function in CodeIgniter before 2.1.4 might allow remote attackers to bypass an intended protection mechanism and conduct cross-site scripting (XSS) attacks via an unclosed HTML tag.

CPENameOperatorVersion
codeigniterlt2.1.4

CPE	Name	Operator	Version
	codeigniter	lt	2.1.4

References

github.com/bcit-ci/CodeIgniter/issues/4020

nealpoole.com/blog/2013/07/codeigniter-21-xss-clean-filter-bypass/

www.codeigniter.com/userguide2/changelog.html