GHSA-P9VV-3945-X93H Cross-Site Scripting in semantic-ui-search

All versions of semantic-ui-search are vulnerable to Cross-Site Scripting. Lack of output encoding on the selection dropdowns can lead to user input being executed instead of printed as text. Recommendation No fix is currently available. Consider using an alternative module until a fix is made...

Cross-Site Scripting in semantic-ui-search

All versions of semantic-ui-search are vulnerable to Cross-Site Scripting. Lack of output encoding on the selection dropdowns can lead to user input being executed instead of printed as text. Recommendation No fix is currently available. Consider using an alternative module until a fix is made...

PT-2020-21435

Name of the Vulnerable Software and Affected Versions semantic-ui-search versions all versions Description The issue is related to Cross-Site Scripting due to the lack of output encoding on the selection dropdowns, which can cause user input to be executed instead of being printed as text...

PT-2020-21123

Name of the Vulnerable Software and Affected Versions fomantic-ui versions prior to 2.7.0 Description The issue is related to a lack of output encoding on the selection dropdowns, which can lead to user input being executed instead of printed as text, resulting in Cross-Site Scripting...

Cross-Site Scripting

Overview Versions of fomantic-ui are vulnerable to Cross-Site Scripting. Lack of output encoding on the selection dropdowns can lead to user input being executed instead of printed as text. Recommendation Upgrade to version 2.7.0 or later. References - GitHub Release - GitHub Advisory...