Threats tagged 'ghsa-x36f-3cwx-9h52'

Web::Simple versions before 0.036 for Perl do not properly escape values interpolated into double-quoted strings in HTML::Tags output, allowing an attacker controlling such values to inject script into generated pages.