Skip to content
Pphlex-ruby
Products
| Product | CVEs | Exploited | Latest |
|---|
| phlex | 3 | – | Apr 30, 2024 |
Exploited and recent CVEs
-
CVE-2024-32970
High 7.1
Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex
0.7%
-
CVE-2024-32463
High 7.1
phlex makes Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tags
0.6%
-
CVE-2024-28199
High 7.1
Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex
0.6%