Where
-Infinity
0

Trending

Last week
Last month
Last year

Versions

1.7.3
1

prototypejs PrototypeXSS

Risk 52
Severity
7.5
XSS
AV:N/AC:L/Au:N/C:P/I:P/A:P

Common Vulnerabilities and Exposures assigned an identifier CVE-2008-7220 to the following vulnerability:

Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors.

References: ------------ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7220 http://github.com/sstephenson/prototype/blob/master/CHANGELOG http://osvdb.org/46312

Upstream patch: --------------- git clone git://github.com/sstephenson/prototype.git git show 02cc9992e915c024650ddc77a91064f7a4252914

The relevant file in WordPress source rpm package (F10) is: ------------------------------------------------------------ BUILD/wordpress/wp-includes/js/prototype.js

1 / 2
Source: Red Hat
First published (updated )
CVE-2008-7220

prototypejs PrototypeAn issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an att…

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service (ReDOS) through stripping crafted HTML tags.

First published (updated )
CVE-2020-27511

Prototype JavaScript frameworkCommon Vulnerabilities and Exposures assigned an identifier CVE-2008-7220 to the following vulnerabi…

Risk 19
Severity
4

Common Vulnerabilities and Exposures assigned an identifier CVE-2008-7220 to the following vulnerability:

Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors.

References: ------------ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7220 http://github.com/sstephenson/prototype/blob/master/CHANGELOG http://osvdb.org/46312

Upstream patch: --------------- git clone git://github.com/sstephenson/prototype.git git show 02cc9992e915c024650ddc77a91064f7a4252914

The relevant file in WordPress source rpm package (F10) is: ------------------------------------------------------------ BUILD/wordpress/wp-includes/js/prototype.js

First published (updated )
REDHAT-BUG-523277

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203