3 matches found
CVE-2019-15482
selectize-plugin-a11y before 1.1.0 has XSS via the msg field...
6.1CVSS5.8AI score0.00861EPSS
SaveExploits0References1
CVE-2019-15482
selectize-plugin-a11y before 1.1.0 has XSS via the msg field...
6AI score0.00861EPSS
SaveExploits0References2
CVE-2019-15482
The CVE-2019-15482 entry concerns the package selectize-plugin-a11y prior to version 1.1.0, where a Cross-Site Scripting (XSS) vulnerability exists in the msg field. The root cause, as described in the Node.js advisory, is that the accessibility.liveRegion.speak function does not sanitize the msg...
6.1CVSS5.9AI score0.00861EPSS
SaveExploits0References2Affected Software1
20