GitHub Advisoryadvisory · npm

GHSA-fwcw-5qw2-87mp fuelux vulnerable to Cross-Site Scripting in Pillbox feature

HIGH Published 2020-09-01 Modified 2022-08-03 Official page ↗
Aliases
CVE-2016-1000235
Ecosystem
npm
Packages
fuelux
Severity
High
Weaknesses
CWE-79
Reviewed
2020-08-31

Affected packages

• npm fuelux: < 3.15.7 → fixed in 3.15.7

Description

Affected versions of `fuelux` contain a cross-site scripting vulnerability in the Pillbox feature. By supplying a script as a value for a new pillbox, it is possible to cause arbitrary script execution. Recommendation Update to version 3.15.7 or later.

Related

Alias · not in database (1)

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References