Description
The jquery.json-viewer library before version 1.5.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.
Recommendation
Update the jquery.json-viewer package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.5.0
- Patched version(s): 1.5.0
References
Could your website be exposed too?
SmartScanner can check your website for Cross-site Scripting in jquery.json-viewer and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Cross-Site Scripting in jquery.json-viewer - jquery.json-viewer - Vulnerability
- Cross-site Scripting in tableexport.jquery.plugin - CVE-2022-1291
- Cross-site Scripting in CKEditor4 - CVE-2022-24728
- materialize-css vulnerable to cross-site Scripting (XSS) due to improper escape of user input - CVE-2022-25349
You might also like:
See something that needs correcting? Let us knowUpdated February 01, 2023