Lucene search
+L

2 matches found

OSV
OSV
added 2020/09/03 7:00 p.m.8 views

GHSA-G9WG-WQ4F-2X5W Cross-Site Scripting in console-feed

Versions of console-feed prior to 2.8.10 are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape the rendered output. If an application uses console-feed and a malicious JavaScript payload was passed to a console.log'%', payload call, the package would render HTML...

6.3AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 7:00 p.m.17 views

Cross-Site Scripting in console-feed

Versions of console-feed prior to 2.8.10 are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape the rendered output. If an application uses console-feed and a malicious JavaScript payload was passed to a console.log'%', payload call, the package would render HTML...

0.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder