GHSA-fpx3-h2pc-88vf
Laravel Starter Cross Site Scripting (XSS)
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | nasirkhan/laravel-starter | < 11.11.0 | 11.11.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting (XSS) in the tags feature. Any user with the ability of create or modify tags can inject malicious JavaScript code in the name field.
References
External links from the advisory. They lead to third-party sites.