Lucene search
PRIOn knowledge basePRION:CVE-2022-25854HistoryApr 29, 2022 - 8:15 p.m.
Cross site scripting
2022-04-2920:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
43.9%
This affects the package @yaireo/tagify before 4.9.8. The package is used for rendering UI components inside the input or text fields, and an attacker can pass a malicious placeholder value to it to fire the XSS payload.
Related
cvelist
cvelist
CVE-2022-25854 Cross-site Scripting (XSS)
2022-04-29 00:00:00
osv
osv
tagify can pass a malicious placeholder to initiate the cross-site scripting (XSS) payload
2022-04-30 00:00:33
CVE-2022-25854
2022-04-29 20:15:07
nvd
nvd
CVE-2022-25854
2022-04-29 20:15:07
cve
cve
CVE-2022-25854
2022-04-29 20:15:07
veracode
veracode
Cross-Site Scripting (XSS)
2022-05-04 13:01:43
github
github