Description
Versions of jquery.json-viewer prior to 1.3.0 are vulnerable to Cross-Site Scripting (XSS). The package insufficiently sanitizes user input when creating links, and concatenates the user input in an <a> tag.
Recommendation
Update the jquery.json-viewer package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.3.0
- Patched version(s): 1.3.0
References
Could your website be exposed too?
SmartScanner can check your website for Cross-Site Scripting in jquery.json-viewer - jquery.json-viewer and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Cross-site Scripting in jquery.json-viewer - CVE-2022-30241
- Reflected Cross-Site Scripting in jquery.terminal - Vulnerability
- CKEditor5 cross-site scripting vulnerability caused by the editor instance destroying process - @ckeditor/ckeditor5-html-support - CVE-2022-31175
- Cross-site scripting vulnerability in TinyMCE - CVE-2024-21908
You might also like:
See something that needs correcting? Let us knowUpdated January 09, 2023