5 matches found
CVE-2019-12313
XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element...
CVE-2019-12313
creationtimestamp| type| source ---|---|--- 2019-05-24 14:48:22+00:00| seen| https://t.me/cvemitreorg/283...
CVE-2019-12313
XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element...
angular2-shave (>=1.0.0, <=1.1.0) potentially affected by CVE-2019-12313 via shave (0.1.8)
shave NPM version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on shave and may be impacted: - angular2-shave =1.0.0, =1.1.0 Source cves: CVE-2019-12313 Source advisory: MEND:CVE-2019-12313...
CVE-2019-12313
CVE-2019-12313 affects the Shave JavaScript plugin. Multiple sources confirm a Cross-Site Scripting vulnerability in versions before 2.5.3 caused by mishandled output encoding during the overwrite of an HTML element. The in-scope impact is XSS on client browsers when provided encoded HTML input i...