Vulnerability library
Security checkSeptember 12, 2024

DOM clobbering could escalate to Cross-site Scripting (XSS) - @pagefind/default-ui

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

Medium severitynpm@pagefind/default-ui

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

Pagefind initializes its dynamic JavaScript and WebAssembly files relative to the location of the first script you load. This information is gathered by looking up the value of document.currentScript.src.

Recommendation

Update the @pagefind/default-ui package to the latest compatible version. Followings are version details:

  • Affected version(s): < 1.1.1
  • Patched version(s): 1.1.1

References

Could your website be exposed too?

SmartScanner can check your website for DOM clobbering could escalate to Cross-site Scripting (XSS) - @pagefind/default-ui and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

See something that needs correcting? Let us knowUpdated September 12, 2024