An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured to servce the user-manual itself.
A security issue has been found in Privoxy before version 3033 cgi_error_no_template() did not encode the template name, which could lead to cross-site scripting when Privoxy is configured to servce the user-manual itself ...
Announcing Privoxy 3033 stable
--------------------------------------------------------------------
Privoxy 3033 fixes an XSS issue, multiple DoS issues and a
couple of other bugs The issues also affect earlier Privoxy releases
Privoxy 3033 also comes with a couple of general improvements and
new features
-------------------------------- ...
Vulmon