| Title | https://www.npmjs.com/package/dante3 dante3 * Cross Site Scripting |
|---|
| Description | Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the insert link component, allowing an attacker to obtain sensitive information by sending a specially crafted payload. |
|---|
| Source | ⚠️ https://gist.github.com/Masamuneee/3be24bf5bf2b09dc61ead2af89363f86 |
|---|
| User | masamune (UID 79684) |
|---|
| Submission | 03/07/2025 04:08 AM (1 Year ago) |
|---|
| Moderation | 03/23/2025 07:03 PM (17 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 300717 [michelson Dante Editor up to 0.4.4 Insert Link cross site scripting] |
|---|
| Points | 16 |
|---|