Lucene search
+L

3 matches found

OSV
OSV
added 2020/09/03 5:3 p.m.14 views

GHSA-C53X-WWX2-PG96 Cross-Site Scripting in @berslucas/liljs

Versions of @berslucas/liljs prior to 1.0.2 are vulnerable to Cross-Site Scripting XSS. The package uses the unsafe innerHTML function without sanitizing input, which may allow attackers to execute arbitrary JavaScript on the victim's browser. Recommendation Upgrade to version 1.0.2 or later...

6.5CVSS6.9AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2020/09/03 5:3 p.m.17 views

Cross-Site Scripting in @berslucas/liljs

Versions of @berslucas/liljs prior to 1.0.2 are vulnerable to Cross-Site Scripting XSS. The package uses the unsafe innerHTML function without sanitizing input, which may allow attackers to execute arbitrary JavaScript on the victim's browser. Recommendation Upgrade to version 1.0.2 or later...

4.2AI score
SaveExploits0References6Affected Software1
nodejs
nodejs
added 2019/06/20 8:26 p.m.17 views

Cross-Site Scripting

Overview Versions of @berslucas/liljs prior to 1.0.2 are vulnerable to Cross-Site Scripting XSS. The package uses the unsafe innerHTML function without sanitizing input, which may allow attackers to execute arbitrary JavaScript on the victim's browser. Recommendation Upgrade to version 1.0.2 or...

6.7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder