@carlsonp/kort (>=0.9.1, <=1.0.1), @concretecms/bedrock (0.9.3) +26 more potentially affected by CVE-2023-46998 via bootbox (>=4.4.0, <=5.5.3)

bootbox NPM version =4.4.0, =0.9.1, =1.0.9, =2.0.3, =0.2.2, =0.0.6-01badfa5-e3a7-42b4-b57b-a742eb65fee6, =1.0.0, =1.0.0, =0.0.2, =0.0.1, =0.0.3, =1.0.0, =1.1.1 - botkit-socket-client 0.0.1 and more Source cves: CVE-2023-46998 Source advisory: OSV:GHSA-M4CH-4M5F-2GP6...

CVE-2023-46998

CVE-2023-46998 describes a Cross Site Scripting vulnerability in Bootbox.js versions 3.2 through 6.0. The issue allows a remote attacker to execute arbitrary code by sending a crafted payload to alert(), confirm(), or prompt() functions. The connected documents confirm the affected product and vu...

CVE-2023-46998

Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert, confirm, prompt functions...