tarteaucitron.js vulnerable to Cross-site Scripting

Description

Cross-site Scripting (XSS) - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1.

Recommendation

Update the tarteaucitronjs package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.13.1
• Patched version(s): 1.13.1

References

• GHSA-f44m-65h3-99vc
• huntr.dev
• CVE-2023-3620
• CWE-79
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• tarteaucitron Cross-site Scripting (XSS) - CVE-2025-1467
• rsshub vulnerable to Cross-site Scripting via unvalidated URL parameters - CVE-2023-26491
• layui vulnerable to cross-site scripting - CVE-2023-3691
• Jodit Editor vulnerable to cross-site scripting - CVE-2023-42399

Tags:

npm

tarteaucitronjs