CVE-2015-1866

MEDIUM

Ember.js 1.10.x < 1.10.1 and 1.11.x < 1.11.2 - Cross-Site Scripting

Title source: llm

Cross-site scripting (XSS) vulnerability in Ember.js 1.10.x before 1.10.1 and 1.11.x before 1.11.2.

Core 3

Core References

Vendor Advisory x_refsource_confirm

Exploit, Mailing List, Mitigation, Patch, Third Party Advisory mailing-list x_refsource_mlist

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

CVSS v3 6.1

EPSS 0.0033

EPSS Percentile 56.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (4)

emberjs/ember.js 1.10.0 (5 CPE variants)

emberjs/ember.js 1.11.0 (6 CPE variants)

emberjs/ember.js 1.11.1

rubygems/ember-source 1.10.0 - 1.10.1RubyGems

Published Sep 20, 2017

Tracked Since Feb 18, 2026