Vulnerabilities > Milesj > Decoda > 2.9

DATE CVE VULNERABILITY TITLE RISK
2012-07-03 CVE-2012-3832 Cross-Site Scripting vulnerability in Milesj Decoda
Cross-site scripting (XSS) vulnerability in decoda/Decoda.php in Decoda before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to (1) b or (2) div tags.
network
milesj CWE-79
4.3
2012-07-03 CVE-2012-3831 Cross-Site Scripting vulnerability in Milesj Decoda
Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.1 allows remote attackers to inject arbitrary web script or HTML via multiple URLs in an img tag.
network
milesj CWE-79
4.3
2012-07-03 CVE-2012-3830 Cross-Site Scripting vulnerability in Milesj Decoda
Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via the video directive.
network
milesj CWE-79
4.3