Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an uploaded file.
2013-11-19T04:49:37.937
2025-04-11T00:51:21.963
Deferred
CVSSv2: 4.3 (MEDIUM)
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.6
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | reviewboard | review_board | 1.6 | Yes |
| Application | reviewboard | review_board | 1.6 | Yes |
| Application | reviewboard | review_board | 1.6 | Yes |
| Application | reviewboard | review_board | 1.6 | Yes |
| Application | reviewboard | review_board | 1.6 | Yes |
| Application | reviewboard | review_board | 1.6.1 | Yes |
| Application | reviewboard | review_board | 1.6.2 | Yes |
| Application | reviewboard | review_board | 1.6.3 | Yes |
| Application | reviewboard | review_board | 1.6.4 | Yes |
| Application | reviewboard | review_board | 1.6.5 | Yes |
| Application | reviewboard | review_board | 1.6.6 | Yes |
| Application | reviewboard | review_board | 1.6.7 | Yes |
| Application | reviewboard | review_board | 1.6.8 | Yes |
| Application | reviewboard | review_board | 1.6.9 | Yes |
| Application | reviewboard | review_board | 1.6.10 | Yes |
| Application | reviewboard | review_board | 1.6.11 | Yes |
| Application | reviewboard | review_board | 1.6.12 | Yes |
| Application | reviewboard | review_board | 1.6.13 | Yes |
| Application | reviewboard | review_board | 1.6.14 | Yes |
| Application | reviewboard | review_board | 1.6.15 | Yes |
| Application | reviewboard | review_board | 1.6.16 | Yes |
| Application | reviewboard | review_board | 1.6.17 | Yes |
| Application | reviewboard | review_board | 1.6.18 | Yes |
| Application | reviewboard | review_board | 1.6.19 | Yes |
| Application | reviewboard | review_board | 1.6.20 | Yes |
| Application | reviewboard | review_board | 1.7.0 | Yes |
| Application | reviewboard | review_board | 1.7.0.1 | Yes |
| Application | reviewboard | review_board | 1.7.1 | Yes |
| Application | reviewboard | review_board | 1.7.2 | Yes |
| Application | reviewboard | review_board | 1.7.3 | Yes |
| Application | reviewboard | review_board | 1.7.4 | Yes |
| Application | reviewboard | review_board | 1.7.5 | Yes |
| Application | reviewboard | review_board | 1.7.6 | Yes |
| Application | reviewboard | review_board | 1.7.7 | Yes |
| Application | reviewboard | review_board | 1.7.8 | Yes |
| Application | reviewboard | review_board | 1.7.9 | Yes |
| Application | reviewboard | review_board | 1.7.10 | Yes |
| Application | reviewboard | review_board | 1.7.11 | Yes |
| Application | reviewboard | review_board | 1.7.12 | Yes |
| Application | reviewboard | review_board | 1.7.13 | Yes |
| Application | reviewboard | review_board | 1.7.14 | Yes |
| Application | reviewboard | review_board | 1.7.15 | Yes |
| Application | reviewboard | review_board | 1.7.16 | Yes |