CVE-2016-1236
MEDIUMWebSVN - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3) listing.php, and (4) comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a (a) file or (b) directory in a repository.
Scores
CVSS v3
6.1
EPSS
0.0040
EPSS Percentile
60.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Classification
CWE
CWE-79
Status
draft
Affected Products (2)
websvn/websvn
debian/debian_linux
Timeline
Published
May 11, 2016
Tracked Since
Feb 18, 2026