Lucene search
K

6 matches found

OSV
OSV
added 2025/02/23 4:15 p.m.3 views

CVE-2025-1467

Versions of the package tarteaucitronjs before 1.17.0 are vulnerable to Cross-site Scripting XSS via the getElemWidth and getElemHeight. This is related to SNYK-JS-TARTEAUCITRONJS-8366541...

5.1CVSS6AI score
Exploits0References4
NVD
NVD
added 2025/02/23 4:15 p.m.7 views

CVE-2025-1467

Versions of the package tarteaucitronjs before 1.17.0 are vulnerable to Cross-site Scripting XSS via the getElemWidth and getElemHeight. This is related to SNYK-JS-TARTEAUCITRONJS-8366541...

6.1CVSS0.00155EPSS
Exploits0References4
CVE
CVE
added 2025/02/23 3:19 p.m.61 views

CVE-2025-1467

The CVE-2025-1467 entry concerns tarteaucitronjs versions before 1.17.0, which are vulnerable to Cross-site Scripting (XSS) via the getElemWidth() and getElemHeight() functions. Multiple sources (NVD, Red Hat, Veracode, OSV, CIRCL, GHSA) consistently describe the flaw as an XSS issue rooted in in...

6.1CVSS6.1AI score0.00155EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/02/23 3:19 p.m.6 views

CVE-2025-1467

Versions of the package tarteaucitronjs before 1.17.0 are vulnerable to Cross-site Scripting XSS via the getElemWidth and getElemHeight. This is related to SNYK-JS-TARTEAUCITRONJS-8366541...

6.1CVSS6.1AI score0.00155EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/02/23 12:0 a.m.1 views

tarteaucitron.js 安全漏洞

tarteaucitron.js is a cookie manager for the Amauri CHAMPEAUX individual developer. A security vulnerability exists in tarteaucitron.js version 1.17.0, which stems from the getElemWidth and getElemHeight functions containing a cross-site scripting vulnerability...

6.1CVSS6AI score0.00155EPSS
Exploits0References5
Snyk
Snyk
added 2025/02/09 12:3 p.m.2 views

Cross-site Scripting (XSS)

Overview tarteaucitronjs is a package that provides compliance to the European cookie law. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the getElemWidth and getElemHeight. This is related to SNYK-JS-TARTEAUCITRONJS-8366541 Details Cross-site scripting or XSS is...

6.1CVSS5.2AI score0.00155EPSS
Exploits0References2
Rows per page
Query Builder