Lucene search
Veracode Vulnerability DatabaseVERACODE:35052HistoryApr 11, 2022 - 8:08 a.m.
Cross-Site Scripting (XSS)
2022-04-1108:08:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
21.4%
tableexport.jquery.plugin is vulnerable to cross-site scripting. The vulnerability exists in the parseString function in tableExport.js due to a lack of sanitization in the url generation which allows a malicious attacker to steal sensitive information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tableexport.jquery.plugin | le | 1.22.0 | |
| tableexport.jquery.plugin | le | 1.22.0 |
References
github.com/advisories/GHSA-j636-crp3-m584
github.com/hhurz/tableexport.jquery.plugin/commit/dcbaee23cf98328397a153e71556f75202988ec9
github.com/hhurz/tableExport.jquery.plugin/commit/de1c24fe9cbb97d28bacab29b2fc24c78defeb0e
huntr.dev/bounties/49a14371-6058-47dd-9801-ec38a7459fc5
huntr.dev/bounties/49a14371-6058-47dd-9801-ec38a7459fc5/
Related
prion
prion
Cross site scripting
2022-04-10 20:15:00
huntr
huntr
XSS vulnerability with default `onCellHtmlData` function
2022-04-06 00:01:39
nvd
nvd
CVE-2022-1291
2022-04-10 20:15:07
github
github
Cross-site Scripting in tableexport.jquery.plugin
2022-04-11 00:00:22
osv
osv
Cross-site Scripting in tableexport.jquery.plugin
2022-04-11 00:00:22
CVE-2022-1291
2022-04-10 20:15:07
cve
cve
CVE-2022-1291
2022-04-10 20:15:07
cvelist
cvelist