2 matches found
GHSA-HWMC-R6MF-JH83 Schema.org has cross-site scripting (XSS) via script break-out in toScript() output
Schema.org has a cross-site scripting XSS vulnerability via script break-out in toScript output...
5.3CVSS5.6AI score
SaveExploits0References5
Cross-site scripting (XSS) via script break-out in toScript() output
What's Changed Escape HTML tags in toScript output to prevent script break-out by @freekmurze in https://github.com/spatie/schema-org/pull/242 Values containing passed as schema properties could break out of the generated block and execute injected HTML when the value was attacker-controlled...
6.2AI score
SaveExploits0Affected Software1
20