CVE-2012-1915

Name of the Vulnerable Software and Affected Versions EllisLab CodeIgniter version 2.1.2

Description The issue allows remote attackers to bypass the xss clean() filter and perform cross-site scripting (XSS) attacks. This means an attacker can inject malicious scripts into a website, potentially stealing user data or taking control of the user's session.

Recommendations For EllisLab CodeIgniter version 2.1.2, consider disabling the xss clean() filter until a patch is available, and restrict user input to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.