2 matches found
GHSA-G9WG-WQ4F-2X5W Cross-Site Scripting in console-feed
Versions of console-feed prior to 2.8.10 are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape the rendered output. If an application uses console-feed and a malicious JavaScript payload was passed to a console.log'%', payload call, the package would render HTML...
6.3AI score
SaveExploits0References1
Cross-Site Scripting in console-feed
Versions of console-feed prior to 2.8.10 are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape the rendered output. If an application uses console-feed and a malicious JavaScript payload was passed to a console.log'%', payload call, the package would render HTML...
0.9AI score
SaveExploits0References2Affected Software1
20