PT-2021-15501

CVE-2021-23411

·

Published

2021-07-21

·

Updated

2021-09-21

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions anchorme versions prior to the fixed version
Description The issue concerns Cross-site Scripting (XSS) via the main functionality of the package. It accepts input that can result in the output, an anchor a tag, containing undesirable Javascript code that can be executed upon user interaction. All versions of the package are affected.
Recommendations For versions prior to the fixed version, update to the latest version to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-W4WQ-RVMQ-77X7
Found an issue in the description? Have something to add? Feel free to write us 👾