Отправить #515869: https://www.npmjs.com/package/dante3 dante3 * Cross Site ScriptingИнформация

Названиеhttps://www.npmjs.com/package/dante3 dante3 * Cross Site Scripting
ОписаниеAffected versions of this package are vulnerable to Cross-site Scripting (XSS) via the insert link component, allowing an attacker to obtain sensitive information by sending a specially crafted payload.
Источник⚠️ https://gist.github.com/Masamuneee/3be24bf5bf2b09dc61ead2af89363f86
Пользователь
 masamune (UID 79684)
Представление07.03.2025 04:08 (2 лет назад)
Модерация23.03.2025 19:03 (17 days later)
Статуспринято
Запись VulDB300717 [michelson Dante Editor до 0.4.4 Insert Link межсайтовый скриптинг]
Баллы16

Do you want to use VulDB in your project?

Use the official API to access entries easily!