Vulnerabilities (CVE)

Filtered by vendor Kohanaframework Subscribe
Filtered by product Kohana
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-10510 2 Debian, Kohanaframework 2 Debian Linux, Kohana 2021-03-31 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting (XSS) vulnerability in the Security component of Kohana before 3.3.6 allows remote attackers to inject arbitrary web script or HTML by bypassing the strip_image_tags protection mechanism in system/classes/Kohana/Security.php.