CVE-2013-6459: Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attac...

Security readout for executives and security teams

CVE-2013-6459 is an XSS flaw in the Ruby will_paginate gem before 3.0.5. A remote attacker could cause unsafe script or HTML to appear through generated pagination links. Business risk is mainly web-session compromise, user impersonation, or phishing inside affected Ruby applications. Exposure is most likely in Ruby web applications that use will_paginate earlier than 3.0.5 and render pagination controls on pages reachable by untrusted users. Address during normal vulnerability remediation, faster for public-facing or privileged web applications. There is no supplied evidence of active exploitation, but XSS can still create meaningful account and trust risk. Mitigation focus: Inventory Ruby applications using the will_paginate gem.; Upgrade will_paginate to 3.0.5 or later where it is present.; Review vendor or distribution advisories for packaged Ruby deployments..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.