CVE-2024-51091

creationtimestamp| type| source ---|---|--- 2025-03-03 20:49:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljit77tpfr2i 2025-03-03 21:24:51+00:00| seen| https://t.me/cvedetector/19407 2025-03-04 16:31:44+00:00| published-proof-of-concept|...

anima-pull2load (>=1.0.1 <=1.0.3), bem-register (>=1.0.0 <=1.0.5) +11 more potentially affected by CVE-2024-51091 via seajs (>=1.2.1 <=2.2.1)

seajs NPM version =1.2.1, =1.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.1, =0.0.1, =1.0.7, =0.9.11, =1.1.0, =1.1.3 Source cves: CVE-2024-51091 Source advisory: OSV:GHSA-PFR4-4397-3HG8...

CVE-2024-51091

Cross Site Scripting vulnerability in seajs v.2.2.3 allows a remote attacker to execute arbitrary code via the seajs package...

CVE-2024-51091

CVE-2024-51091 affects seaw.js (seajs) v2.2.3. The issue is a Cross-Site Scripting vulnerability arising from improper input sanitization in the seajs package, enabling a remote attacker to execute arbitrary code via the vulnerable component. Several connected sources corroborate the vulnerabilit...