angular-ui-notification Cross-site Scripting vulnerability

Description

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting (XSS) vulnerability.

Recommendation

No fix is available yet. Followings are affected versions:

• >= 0.1.0, <= 0.3.6

References

• GHSA-mrcj-5qxr-vhp2
• alexcrack.com
• CVE-2023-34840
• CWE-79
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• vxe-table Cross-site Scripting vulnerability - CVE-2023-1001
• Vega has Cross-site Scripting vulnerability in `lassoAppend` function (GHSA-w5m3-xh75-mp55) - CVE-2023-26487
• Layui cross-site scripting (XSS) vulnerability - CVE-2023-50550
• webmention.js Cross-site Scripting vulnerability - CVE-2023-3672

Tags:

npm

angular-ui-notification