CVE-2024-39308 — RailsAdmin Cross-site Scripting vulnerability in the list view
RailsAdmin is a Rails engine that provides an interface for managing data. RailsAdmin list view has the XSS vulnerability, caused by improperly-escaped HTML title attribute. Upg…
Published: 2024-07-08 · CVSS: 6.8 · CVSS 3.0
RailsAdmin is a Rails engine that provides an interface for managing data. RailsAdmin list view has the XSS vulnerability, caused by improperly-escaped HTML title attribute. Upgrade to 3.1.3 or 2.2.2 (to be released).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7