Lucene search
Veracode Vulnerability DatabaseVERACODE:35362HistoryMay 04, 2022 - 1:01 p.m.
Cross-Site Scripting (XSS)
2022-05-0413:01:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.001 Low
EPSS
Percentile
43.9%
@yaireo/tagify is vulnerable to cross-site scripting. The vulnerability exists in Tagify function in tagify.js because the placeholder input field is not escaped which allows a attacker to inject and execute arbitrary javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @yaireo/tagify | le | 4.9.7 | |
| @yaireo/tagify | le | 4.9.7 |
Related
cvelist
cvelist
CVE-2022-25854 Cross-site Scripting (XSS)
2022-04-29 00:00:00
osv
osv
tagify can pass a malicious placeholder to initiate the cross-site scripting (XSS) payload
2022-04-30 00:00:33
CVE-2022-25854
2022-04-29 20:15:07
nvd
nvd
CVE-2022-25854
2022-04-29 20:15:07
cve
cve
CVE-2022-25854
2022-04-29 20:15:07
prion
prion
Cross site scripting
2022-04-29 20:15:00
github
github