Lucene search
PRIOn knowledge basePRION:CVE-2021-43785HistoryNov 26, 2021 - 7:15 p.m.
Code injection
2021-11-2619:15:00
PRIOn knowledge base
www.prio-n.com
5
0.001 Low
EPSS
Percentile
31.9%
@joeattardi/emoji-button is a Vanilla JavaScript emoji picker component. In affected versions there are two vectors for XSS attacks: a URL for a custom emoji, and an i18n string. In both of these cases, a value can be crafted such that it can insert a script tag into the page and execute malicious code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| emoji_button | lt | 4.6.2 |
Related
cve
cve
CVE-2021-43785
2021-11-26 19:15:08
cvelist
cvelist
osv
osv
Cross-Site Scripting Vulnerability in @joeattardi/emoji-button
2021-12-01 18:29:02
CVE-2021-43785
2021-11-26 19:15:08
veracode
veracode
Cross-site Scripting (XSS)
2021-11-29 16:45:01
github
github
Cross-Site Scripting Vulnerability in @joeattardi/emoji-button
2021-12-01 18:29:02
cnvd
cnvd
Emoji-Button Cross-Site Scripting Vulnerability
2021-11-30 00:00:00
nvd
nvd
CVE-2021-43785
2021-11-26 19:15:08