Lucene search
AnonymousNODEJS:1669HistoryMay 06, 2021 - 3:53 p.m.
Cross-Site Scripting
2021-05-0615:53:49
Anonymous
www.npmjs.com
21
EPSS
0.001
Percentile
26.4%
Overview
react-draft-wysiwyg (aka React Draft Wysiwyg) before 1.14.6 allows a javascript: URi in a Link Target of the link decorator in decorators/Link/index.js when a draft is shared across users, leading to XSS.
Recommendation
Upgrade to version 1.14.6 or later
References
Related
osv
osv
Cross-site Scripting in React Draft Wysiwyg
2021-05-06 15:52:35
CVE-2021-31712
2021-04-24 21:15:07
cve
cve
CVE-2021-31712
2021-04-24 21:15:07
github
github
Cross-site Scripting in React Draft Wysiwyg
2021-05-06 15:52:35
nvd
nvd
CVE-2021-31712
2021-04-24 21:15:07
cvelist
cvelist
CVE-2021-31712
2021-04-24 20:56:59
veracode
veracode
Cross-Site Scripting (XSS)
2021-05-08 09:15:10
prion
prion
Cross site scripting
2021-04-24 21:15:00