Harvest Chosen 跨站脚本漏洞

Chosen is a Harvest open source library for making select boxes more user-friendly. A cross-site scripting vulnerability exists in versions prior to Chosen 1.8.6 that stems from incorrect manipulation of the parameter grouplabel resulting in cross-site scripting...

PT-2022-8060 · Unknown · Harvest Chosen

Name of the Vulnerable Software and Affected Versions: Harvest Chosen versions up to 1.8.6 Description: A problematic issue has been found in Harvest Chosen, affecting the AbstractChosen function of the file coffee/lib/abstract-chosen.coffee. The manipulation of the group label argument leads to...