Cross-Site Scripting (XSS)

@claviska/jquery-minicolors is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of santization in name parameter of jquery.minicolors.js, which allows an attacker to inject and execute arbitrary JavaScript in to the browser...

Duplicate advisory: @claviska/jquery-minicolors vulnerable to Cross-site Scripting

Duplicate advisory This advisory has been withdrawn because it is a duplicate of GHSA-crh5-vv2v-c82q. This link is maintained to preserve external references. Original Description A vulnerability was found in claviska jquery-minicolors up to 2.3.5. It has been rated as problematic. Affected by th...

GHSA-VC9X-GMMR-P7JJ Duplicate advisory: @claviska/jquery-minicolors vulnerable to Cross-site Scripting

Duplicate advisory This advisory has been withdrawn because it is a duplicate of GHSA-crh5-vv2v-c82q. This link is maintained to preserve external references. Original Description A vulnerability was found in claviska jquery-minicolors up to 2.3.5. It has been rated as problematic. Affected by th...

CVE-2021-4243

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-32850. Reason: This candidate is a duplicate of CVE-2021-32850. Notes: All CVE users should reference CVE-2021-32850 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

PT-2022-11595 · Claviska · Jquery Minicolors

Name of the Vulnerable Software and Affected Versions: claviska jquery-minicolors versions up to 2.3.5 Description: A vulnerability was found in the file jquery.minicolors.js, which leads to cross site scripting. The attack may be launched remotely. The manipulation affects some unknown...