~ / search / GHSA-589f-c66p-hxr4

GHSA-589f-c66p-hxr4

grapesjs before 0.19.5 vulnerable to Cross-site Scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-21802

Packages

EcosystemPackageAffectedFixed in
npm grapesjs < 0.19.5 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

The package grapesjs before 0.19.5 is vulnerable to Cross-site Scripting (XSS) due to an improper sanitization of the class name in Selector Manager.

References

External links from the advisory. They lead to third-party sites.