WS-2019-0188

Versions of console-feed prior to 2.8.10 are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape the rendered output. If an application uses console-feed and a malicious JavaScript payload was passed to a console.log'%', payload call, the package would render HTML...

GHSA-G9WG-WQ4F-2X5W Cross-Site Scripting in console-feed

Versions of console-feed prior to 2.8.10 are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape the rendered output. If an application uses console-feed and a malicious JavaScript payload was passed to a console.log'%', payload call, the package would render HTML...

Cross-Site Scripting in console-feed

Versions of console-feed prior to 2.8.10 are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape the rendered output. If an application uses console-feed and a malicious JavaScript payload was passed to a console.log'%', payload call, the package would render HTML...

PT-2020-21305

Name of the Vulnerable Software and Affected Versions console-feed versions prior to 2.8.10 Description The issue arises from the package's failure to properly escape the rendered output, leading to a potential Cross-Site Scripting XSS attack. If a malicious JavaScript payload is passed to a...