CVE-2011-4616: Igor Vlasenko Html-Template-Pro

Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.

Affected products

• Igor Vlasenko Html-Template-Pro: up to and including 0.9506; version 0.01 only; version 0.17 only; version 0.26 only; version 0.34 only; version 0.35 only; …

Published 2012-01-06. Last modified 2026-06-16.