Lucene search
+L

1 matches found

OSV
OSV
added 2020/09/03 5:6 p.m.8 views

GHSA-R3XC-47QG-H929 Cross-Site Scripting in @ionic/core

Versions of @ionic/core prior to 4.0.3, 4.1.3, 4.2.1 or 4.3.1 are vulnerable to Cross-Site Scripting XSS. The package uses the unsafe innerHTML function without sanitizing input, which may allow attackers to execute arbitrary JavaScript on the victim's browser. This issue affects the components: ...

6.1AI score
SaveExploits0References3
Rows per page
Query Builder