1 matches found
CVE-2024-24558: Improper Neutralization of Input During Web Page Generation
TanStack Query supplies asynchronous state management, server-state utilities and data fetching for the web. The @tanstack/react-query-next-experimental NPM package is vulnerable to a cross-site scripting vulnerability. To exploit this, an attacker would need to either inject malicious input or...
8.2CVSS5.6AI score0.00385EPSS
SaveExploits0References2
20