WS-2019-0214

jquery.json-viewer versions before 1.3.0. has a Cross-Site Scripting vulnerability when insufficiently sanitizes user input when creating links, and concatenates the user input in an tag...

EUVD-2022-5005

Malicious code in bioql PyPI...

CVE-2022-30241

The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as in a JSON object, as demonstrated by a SCRIPT element...

redis-commander (>=0.6.7, <=0.7.2) potentially affected by CVE-2022-30241 via jquery.json-viewer (1.4.0)

jquery.json-viewer NPM version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on jquery.json-viewer and may be impacted: - redis-commander =0.6.7, =0.7.2 Source cves: CVE-2022-30241 Source advisory: OSV:GHSA-QP2Q-6H9J-JG2R...

GHSA-QP2Q-6H9J-JG2R Cross-site Scripting in jquery.json-viewer

The jquery.json-viewer library before version 1.5.0 for Node.js does not properly escape characters such as in a JSON object, as demonstrated by a SCRIPT element...

CVE-2022-30241

The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as in a JSON object, as demonstrated by a SCRIPT element...

CVE-2022-30241

The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as in a JSON object, as demonstrated by a SCRIPT element...

PT-2022-20031

Name of the Vulnerable Software and Affected Versions jquery.json-viewer versions 1.4.0 and earlier Description The issue concerns the jquery.json-viewer library, which does not properly escape characters such as in a JSON object. This is demonstrated by a SCRIPT element. Recommendations For...

CVE-2022-30241: Improper Neutralization of Input During Web Page Generation

The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as in a JSON object, as demonstrated by a SCRIPT element...

GHSA-V9WP-8R97-V6XG Cross-Site Scripting in jquery.json-viewer

Versions of jquery.json-viewer prior to 1.3.0 are vulnerable to Cross-Site Scripting XSS. The package insufficiently sanitizes user input when creating links, and concatenates the user input in an tag. This allows attackers to create malicious links with JSON payloads such as: "foo":...

PT-2020-21514

Name of the Vulnerable Software and Affected Versions jquery.json-viewer versions prior to 1.3.0 Description The issue arises from insufficient sanitization of user input when creating links, allowing attackers to create malicious links with JSON payloads. This can lead to arbitrary JavaScript...

Cross-Site Scripting

Overview Versions of jquery.json-viewer prior to 1.3.0 are vulnerable to Cross-Site Scripting XSS. The package insufficiently sanitizes user input when creating links, and concatenates the user input in an tag. This allows attackers to create malicious links with JSON payloads such as: "foo":...