Cross site scripting

Status Board 1.1.81 has reflected XSS via logic.ts...

CVE-2019-15478

Status Board 1.1.81 has reflected XSS via logic.ts...

CVE-2019-15478

CVE-2019-15478 affects Status Board 1.1.81 with a reflected XSS via logic.ts. Multiple sources (GitHub advisory GHSA-6M4R-CGM3-6Q7Q, OSV, Red Hat RH:CVE-2019-15478, CNVD) confirm that status-board is vulnerable; the issue impacts all versions and there is no fix currently available. Mitigation re...

GHSA-GVPX-9459-W3MJ Cross-Site Scripting in @ckeditor/ckeditor5-link

Versions of status-board prior to 10.0.1 are vulnerable to Cross-Site Scripting. The createPreviewButton function fails to sanitize the href attribute of a created tag. This may allow attackers to execute arbitrary JavaScript in a victim's browser. Recommendation Upgrade to version 10.0.1 or late...

Cross-Site Scripting in @ckeditor/ckeditor5-link

Versions of status-board prior to 10.0.1 are vulnerable to Cross-Site Scripting. The createPreviewButton function fails to sanitize the href attribute of a created tag. This may allow attackers to execute arbitrary JavaScript in a victim's browser. Recommendation Upgrade to version 10.0.1 or late...