Lucene search
Veracode Vulnerability DatabaseVERACODE:38447HistoryDec 13, 2022 - 5:03 a.m.
Cross-Site Scripting (XSS)
2022-12-1305:03:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
cross-site scripting
vulnerable software
sanitization failure
malicious javascript injection
0 Low
EPSS
Percentile
0.0%
claviska/jquery-minicolors is vulnerable to cross-site scripting. The vulnerability exists because of the lack of sanitization in the name attribute in jquery.minicolors.min.js, allowing an attacker to inject and execute malicious JavaScript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @claviska/jquery-minicolors | le | 2.3.5 | |
| jquery-minicolors | le | 2.3.4 | |
| @claviska/jquery-minicolors | le | 2.3.5 | |
| jquery-minicolors | le | 2.3.4 |
References
codepen.io/webbiesdk/pen/oNBQNNV
github.com/advisories/GHSA-vc9x-gmmr-p7jj
github.com/claviska/jquery-minicolors/commit/ef134824a7f4110ada53ea6c173111a4fa2f48f3
github.com/claviska/jquery-minicolors/releases/tag/2.3.6
securitylab.github.com/advisories/GHSL-2021-1045_jQuery_MiniColors_Plugin/
vuldb.com/?ctiid.215306
vuldb.com/?id.215306
Related
osv
osv
@claviska/jquery-minicolors vulnerable to Cross-site Scripting
2022-12-12 15:30:31
cvelist
cvelist
CVE-2021-4243
1976-01-01 00:00:00
ubuntucve
ubuntucve
CVE-2021-4243
2022-12-12 00:00:00
github
github
debiancve
debiancve
CVE-2021-4243
2022-12-12 14:15:00
openvas
openvas
Fedora: Security Advisory for sympa (FEDORA-2023-271b912b2b)
2023-06-12 00:00:00
Fedora: Security Advisory for sympa (FEDORA-2023-419ca55dd3)
2023-06-12 00:00:00
nessus
nessus
Fedora 38 : sympa (2023-271b912b2b)
2023-06-12 00:00:00
Fedora 37 : sympa (2023-419ca55dd3)
2023-06-12 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: sympa-6.2.72-2.fc38
2023-06-11 02:03:26
[SECURITY] Fedora 37 Update: sympa-6.2.72-2.fc37
2023-06-11 01:59:36
nvd
nvd
CVE-2021-4243
2022-12-12 14:15:10
cve
cve
CVE-2021-4243
2022-12-12 14:15:10