Description
All versions of bracket-template are vulnerable to stored cross-site scripting (XSS). This is exploitable when a variable passed in via a GET parameter is used in a template.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 1.1.5
References
Could your website be exposed too?
SmartScanner can check your website for Cross-Site Scripting in bracket-template and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Cross-Site Scripting in react-marked-markdown - Vulnerability
- CKEditor4 Cross-site Scripting vulnerability in samples with enabled the preview feature - CVE-2024-24816
- Stimulsoft Dashboard.JS Cross Site Scripting vulnerability - stimulsoft-dashboards-js - CVE-2024-24397
- CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection - CVE-2024-24815
You might also like:
See something that needs correcting? Let us knowUpdated January 09, 2023