~ / search / GHSA-m4ch-4m5f-2gp6

GHSA-m4ch-4m5f-2gp6

Bootbox.js Cross Site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-46998

Packages

EcosystemPackageAffectedFixed in
npm bootbox >= 3.2.0, <= 6.0.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), prompt() functions.

References

External links from the advisory. They lead to third-party sites.