| Title | https://www.npmjs.com/package/ContentTools ContentTools * Cross Site Scripting |
|---|
| Description | Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the edit link attribute component, allowing an attacker to obtain sensitive information by sending a specially crafted payload. |
|---|
| Source | ⚠️ https://gist.github.com/Masamuneee/657f2e2b0eb5bf9b0d4dbb79f00dac37 |
|---|
| User | masamune (UID 79684) |
|---|
| Submission | 03/07/2025 03:59 (1 Year ago) |
|---|
| Moderation | 03/23/2025 18:54 (17 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 300716 [GetmeUK ContentTools up to 1.6.16 Image onload cross site scripting] |
|---|
| Points | 16 |
|---|