GHSA-j636-crp3-m584
Cross-site Scripting in tableexport.jquery.plugin
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | tableexport.jquery.plugin | < 1.25.0 | 1.25.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
There is a cross-site scripting vulnerability with default `onCellHtmlData` function in GitHub repository hhurz/tableexport.jquery.plugin prior to 1.25.0. This can result in transmitting cookies to third-party servers and/or sending data from secure sessions to third-party servers.
References
External links from the advisory. They lead to third-party sites.