CVE-2019-12313

XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element...

krueger-ui (>=1.0.0, <=1.0.2) potentially affected by CVE-2019-12313 via shave (2.1.3)

shave NPM version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on shave and may be impacted: - krueger-ui =1.0.0, =1.0.2 Source cves: CVE-2019-12313 Source advisory: OSV:GHSA-GH4G-3GM9-5WRQ...

CVE-2019-12313

creationtimestamp| type| source ---|---|--- 2019-05-24 14:48:22+00:00| seen| https://t.me/cvemitreorg/283...

CVE-2019-12313

XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element...

CVE-2019-12313

CVE-2019-12313 affects the Shave JavaScript plugin. Multiple sources confirm a Cross-Site Scripting vulnerability in versions before 2.5.3 caused by mishandled output encoding during the overwrite of an HTML element. The in-scope impact is XSS on client browsers when provided encoded HTML input i...