PT-2019-20024
Published
2019-05-30
·
Updated
2019-05-30
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
bootbox versions (affected versions not specified)
Description
The issue concerns a lack of input sanitization in dialog boxes provided by the package, allowing attackers to inject HTML code and execute arbitrary JavaScript, thus facilitating Cross-Site Scripting attacks.
Recommendations
For all affected versions, sanitize user input being passed to
bootbox or consider using an alternative package. Found an issue in the description? Have something to add? Feel free to write us 👾