Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2022/07/15 7:25 p.m.•36 views

GHSA-6F85-3F8Q-QC94 OroCommerce vulnerable to XSS when adding class name to Selector Manager on pages that use GrapeJS editor

Impact Due to insufficient class name validation in GrapeJS library it's possible to add executable JS code in class name through Selector Manager Relates to - https://github.com/artf/grapesjs/issues/4411 Patch Update GrapeJS dependency to =v0.19.5...

6.9CVSS7.2AI score
SaveExploits0References3
Rows per page
Query Builder