GitHub Advisoryadvisory · npm

GHSA-j636-crp3-m584 Cross-site Scripting in tableexport.jquery.plugin

MEDIUM Published 2022-04-11 Modified 2022-04-22 Official page ↗
Aliases
CVE-2022-1291
Ecosystem
npm
Packages
tableexport.jquery.plugin
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2022-04-22

Affected packages

• npm tableexport.jquery.plugin: < 1.25.0 → fixed in 1.25.0

Description

There is a cross-site scripting vulnerability with default `onCellHtmlData` function in GitHub repository hhurz/tableexport.jquery.plugin prior to 1.25.0. This can result in transmitting cookies to third-party servers and/or sending data from secure sessions to third-party servers.

Related

Alias · CVE (1)

  • CVE-2022-1291 XSS vulnerability with default `onCellHtmlData` function in GitHub repository hhurz/tableexport.jquery.plugin prior to 1.25.0. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References