Unrated severityNVD Advisory· Published May 22, 2013· Updated Jun 16, 2026

CVE-2013-2311

Description

Cross-site scripting (XSS) vulnerability in static/js/share.js (aka the social bookmarking widget) in Web2py before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jqhph/Web2pyinferred
Range: <2.3.1
Package: https://pypi.org/project/web2py
Web2py/Web2pyllm-fuzzy
Range: <2.3.1

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN10461119/index.htmlnvd
jvndb.jvn.jp/jvndb/JVNDB-2013-000040nvd
groups.google.com/group/web2py/msg/ca10dffa2f0b2731nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000