WS-2016-0088

Rendr is vulnerable to Cross-site Scripting XSS attacks via unsanitized parameters in server/router.js...

CVE-2016-1000230

Affected versions of "rendr" are vulnerable to cross-site scripting when client side rendering is done inside a "block". Server side rendering is not affected and is properly escaped...

GHSA-V5HP-35HW-CW5X XSS in client rendered block templates in rendr

Affected versions of rendr are vulnerable to cross-site scripting when client side rendering is done inside a block. Server side rendering is not affected and is properly escaped. Recommendation Update to version 1.1.4 or later...

XSS in client rendered block templates in rendr

Affected versions of rendr are vulnerable to cross-site scripting when client side rendering is done inside a block. Server side rendering is not affected and is properly escaped. Recommendation Update to version 1.1.4 or later...

PT-2020-7937

Name of the Vulnerable Software and Affected Versions: rendr versions prior to 1.1.4 Description: The issue affects client-side rendering inside a block and can lead to cross-site scripting. Server-side rendering is not affected as it properly escapes output. Recommendations: Update to version...

Cross-site Scripting (XSS)

rendr-handlebars is vulnerable to cross-site scripting XSS attacks. This is because unsanitized data is passed to the client, allowing the attacks to be performed...

XSS in client rendered block templates

Overview Affected versions of rendr are vulnerable to cross-site scripting when client side rendering is done inside a block. Server side rendering is not affected and is properly escaped. Recommendation Update to version 1.1.4 or later. References - PR 61 - PR 513 - GitHub Advisory...