PT-2021-15501
CVE-2021-23411
·
تاريخ النشر
2021-07-21
·
تاريخ التحديث
2021-09-21
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
anchorme versions prior to the fixed version
Description
The issue concerns Cross-site Scripting (XSS) via the main functionality of the package. It accepts input that can result in the output, an anchor
a tag, containing undesirable Javascript code that can be executed upon user interaction. All versions of the package are affected.Recommendations
For versions prior to the fixed version, update to the latest version to resolve the issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾