15 matches found
CVE-2022-31108
Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. An attacker is able to inject arbitrary CSS into the generated graph allowing them to change the styling of elements outside of the...
CVE-2025-31108
creationtimestamp| type| source ---|---|--- 2025-03-27 06:37:12+00:00| seen| https://t.me/cvedetector/21256...
Linux Distros Unpatched Vulnerability : CVE-2022-31108
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. A...
CVE-2024-31108
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iFlyChat Team iFlyChat – WordPress Chat iflychat allows Stored XSS.This issue affects iFlyChat – WordPress Chat: from n/a through 4.7.2...
CVE-2024-31108 WordPress iFlyChat plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iFlyChat Team iFlyChat – WordPress Chat iflychat allows Stored XSS.This issue affects iFlyChat – WordPress Chat: from n/a through 4.7.2...
CVE-2024-31108 WordPress iFlyChat plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iFlyChat Team iFlyChat – WordPress Chat iflychat allows Stored XSS.This issue affects iFlyChat – WordPress Chat: from n/a through 4.7.2...
CVE-2024-31108
CVE-2024-31108 relates to iFlyChat – WordPress Chat (plugin), with a Stored XSS vulnerability in the web page generation input handling. The issue affects iFlyChat – WordPress Chat from n/a through 4.7.2, per the description. The connected data notes the vulnerability as a vulnerability in an act...
WordPress iFlyChat – WordPress Chat Plugin <= 4.7.2 is vulnerable to Cross Site Scripting (XSS)
Software iFlyChat – WordPress Chat Type Plugin Vulnerable versions = 4.7.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31108 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d092a7fe63ad Credits LVT-tholv2k Required privilege...
@0xgg/echomd (>=1.0.0 <=1.0.4), @agoose77/jupyterlab-markup (>=0.1.0 <=1.0.1) +460 more potentially affected by CVE-2022-31108 via mermaid (>=8.10.1 <=9.1.1)
mermaid NPM version =8.10.1, =1.0.0, =0.1.0, =0.0.18, =6.8.0, =0.5.0, =0.1.0, =0.0.2, =0.0.2, =1.0.1, =0.0.1, =1.0.0, =1.0.4 - @carpathian-ninjas/vue-mermaid =0.0.12 and more Source cves: CVE-2022-31108 Source advisory: OSV:GHSA-X3VM-38HW-55WF...
CVE-2022-31108
Summary of CVE-2022-31108 (mermaid.js) : The vulnerability allows an attacker to inject arbitrary CSS into the generated graph, enabling styling changes to elements outside the SVG and potential information disclosure via CSS selectors that trigger HTTP requests. The issue is tied to how user inp...
CVE-2022-31108 Arbitrary `CSS` injection into the generated graph affecting the container HTML in mermaid.js
Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. An attacker is able to inject arbitrary CSS into the generated graph allowing them to change the styling of elements outside of the...
CVE-2022-31108 Arbitrary `CSS` injection into the generated graph affecting the container HTML in mermaid.js
Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. An attacker is able to inject arbitrary CSS into the generated graph allowing them to change the styling of elements outside of the...
CVE-2022-31108
creationtimestamp| type| source ---|---|--- 2022-06-28 18:10:40+00:00| published-proof-of-concept| https://github.com/mermaid-js/mermaid/security/advisories/GHSA-x3vm-38hw-55wf 2022-06-28 22:42:33+00:00| seen| https://t.me/cibsecurity/45328...