CVE-2021-43785

CVE-2021-43785 affects the @joeattardi/emoji-button Vanilla JavaScript emoji picker. The vulnerability comprises two XSS vectors: (1) a URL used for a custom emoji and (2) an i18n string. In affected versions, crafted values can cause a script tag to be inserted into the HTML, enabling malicious ...