glossarizer vulnerabilities
1 known vulnerability in glossarizer from Pebbleroad. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score
Latest first
- 9.9 Critical severity
glossarizer: Improper Neutralization of Input During Web Page Generation
Glossarizer through 1.5.2 improperly tries to convert text into HTML. Even though the application itself escapes special characters (e.g., <>), the underlying library converts these encoded characters into legitimate HTML, thereby possibly causing stored XSS.