What is GHSA-589f-c66p-hxr4?

GHSA-589f-c66p-hxr4 is a security advisory published by GitHub Security Advisories with Medium severity. grapesjs before 0.19.5 vulnerable to Cross-site Scripting

Which CVE IDs does GHSA-589f-c66p-hxr4 cover?

GHSA-589f-c66p-hxr4 covers the following CVE IDs: CVE-2022-21802. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-589f-c66p-hxr4?

GHSA-589f-c66p-hxr4 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-589f-c66p-hxr4?

GHSA-589f-c66p-hxr4 affects 1 product, including: npm/grapesjs:\u003c 0.19.5.

GHSA-589f-c66p-hxr4MediumCVSS 6.1

grapesjs before 0.19.5 vulnerable to Cross-site Scripting

Vendor

GitHub Security Advisories

Published

July 26, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-21802 →

📋 Description

The package grapesjs before 0.19.5 is vulnerable to Cross-site Scripting (XSS) due to an improper sanitization of the class name in Selector Manager.

🎯 Affected products1

npm/grapesjs:< 0.19.5

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2022-21802
https://github.com/artf/grapesjs/issues/4411%23issuecomment-1167202709
https://github.com/artf/grapesjs/commit/13e85d152d486b968265c4b8017e8901e7d89ff3
https://github.com/artf/grapesjs/releases/tag/v0.19.5
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2936781
https://security.snyk.io/vuln/SNYK-JS-GRAPESJS-2935960
https://github.com/advisories/GHSA-589f-c66p-hxr4