~ / search / GHSA-w5hq-hm5m-4548

GHSA-w5hq-hm5m-4548

Cross Site Scripting vulnerability in store2

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-57556

Packages

EcosystemPackageAffectedFixed in
npm store2 < 2.14.4 2.14.4

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting vulnerability in nbubna store v.2.14.2 and before allows a remote attacker to execute arbitrary code via the store.deep.js component

References

External links from the advisory. They lead to third-party sites.