CVE-2015-9260

Name of the Vulnerable Software and Affected Versions BEdita versions prior to 3.7.0

Description A cross-site scripting (XSS) issue was found, allowing an attack via a crafted URI. Specifically, this occurs with the pages/showObjects URI, for example by appending a payload to a "pages/showObjects/2/0/0/leafs" URI.

Recommendations For versions prior to 3.7.0, update to version 3.7.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the pages/showObjects URI to minimize the risk of exploitation.