GitHub Advisoryadvisory · npm

GHSA-gvg7-pp82-cff3 Cross-Site Scripting in c3

MEDIUM Published 2020-09-01 Modified 2021-09-23 Official page ↗
Aliases
CVE-2016-1000240
Ecosystem
npm
Packages
c3
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2020-08-31

Affected packages

• npm c3: < 0.4.11 → fixed in 0.4.11

Description

Affected versions of `c3` are vulnerable to cross-site scripting via improper sanitization of HTML in rendered tooltips. Recommendation Update to 0.4.11 or later.

Related

Alias · not in database (1)

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References