Lucene search
+L

1 matches found

OSV
OSV
added 2018/05/23 8:37 p.m.57 views

GHSA-GVPX-9459-W3MJ Cross-Site Scripting in @ckeditor/ckeditor5-link

Versions of status-board prior to 10.0.1 are vulnerable to Cross-Site Scripting. The createPreviewButton function fails to sanitize the href attribute of a created tag. This may allow attackers to execute arbitrary JavaScript in a victim's browser. Recommendation Upgrade to version 10.0.1 or late...

6.1CVSS6.4AI score0.0102EPSS
SaveExploits0References8
Rows per page
Query Builder