mxGraph vulnerable to cross-site scripting in setTooltips function

Description

mxGraph v4.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the setTooltips() function.

Recommendation

No fix is available yet. Followings are affected versions:

<= 4.2.2

References

Could your website be exposed too?

SmartScanner can check your website for mxGraph vulnerable to cross-site scripting in setTooltips function and gives you actionable findings to investigate.

Start a free scan

Related Issues

x-data-spreadsheet through 1.1.9 vulnerable to Cross-site Scripting - CVE-2022-25646
@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details - CVE-2022-39350
Smoothie vulnerable to Cross-site Scripting when tooltipLabel or strokeStyle are controlled by users - CVE-2022-25929
mxGraph vulnerable to cross-site scripting in color field - CVE-2019-13127

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated October 19, 2023