CVE-2019-12313

XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element...

@britannica/compendium (>=1.0.0 <=6.0.0-beta.3), @catapult-tech/cp-design-system-row (=1.0.0) +26 more potentially affected by CVE-2019-12313 via shave (>=0.1.8 <=2.5.10)

shave NPM version =0.1.8, =1.0.0, =2.0.0, =0.4.0, =1.0.1, =1.2.10, =0.4.36, =0.2.20, =0.8.167, =0.4.54, =1.1.13, =0.35.2, =0.3.0, =1.24.2, =4.1.0, =16.1.2 and more Source cves: CVE-2019-12313 Source advisory: OSV:GHSA-GH4G-3GM9-5WRQ...

CVE-2019-12313

creationtimestamp| type| source ---|---|--- 2019-05-24 14:48:22+00:00| seen| https://t.me/cvemitreorg/283...

CVE-2019-12313

XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element...

CVE-2019-12313

CVE-2019-12313 affects the Shave JavaScript plugin. Multiple sources confirm a Cross-Site Scripting vulnerability in versions before 2.5.3 caused by mishandled output encoding during the overwrite of an HTML element. The in-scope impact is XSS on client browsers when provided encoded HTML input i...