Security Advisory
CVE-2015-7578
6.1
MEDIUM
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via crafted tag attributes.
Published Date
February 16, 2016
Official Source
NIST NVD Advisory