Lucene search
+L

3 matches found

NVD
NVD
•added 2019/08/23 1:15 p.m.•26 views

CVE-2019-15482

selectize-plugin-a11y before 1.1.0 has XSS via the msg field...

6.1CVSS6AI score0.00861EPSS
SaveExploits0References2
CVE
CVE
•added 2019/08/23 12:51 p.m.•61 views

CVE-2019-15482

The CVE-2019-15482 entry concerns the package selectize-plugin-a11y prior to version 1.1.0, where a Cross-Site Scripting (XSS) vulnerability exists in the msg field. The root cause, as described in the Node.js advisory, is that the accessibility.liveRegion.speak function does not sanitize the msg...

6.1CVSS5.9AI score0.00861EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/23 12:00 a.m.•4 views

CVE-2019-15482: Improper Neutralization of Input During Web Page Generation

selectize-plugin-a11y before 1.1.0 has XSS via the msg field...

6.1CVSS5.8AI score0.00861EPSS
SaveExploits0References2
Rows per page
Query Builder