CVE-2016-1000227

CVE-2016-1000227 is a reserved placeholder entry; connected advisories describe a cross-site scripting vulnerability in bootstrap-tagsinput. All versions are affected by unsanitized input passed to the itemTitle parameter, leading to XSS. The issue is not actively maintained (last updates circa 2...

@corex/argon-theme (>=1.1.1 <=1.1.33), @creative-tim-official/argon-dashboard-free (=1.2.0) +14 more potentially affected by CVE-2016-1000227 via bootstrap-tagsinput (=0.7.1)

bootstrap-tagsinput NPM version =0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-tagsinput and may be impacted: - @corex/argon-theme =1.1.1, =0.27.0, =0.0.1, =0.1.0, =3.0.0, =1.2.0, =0.1.0, =0.2.0, =0.1.1, =1.2.6, =1.4.0, =0.1.89, =0.2....