What is GHSA-hh56-x62g-gvhc?

GHSA-hh56-x62g-gvhc is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site scripting in CLEditor

Which CVE IDs does GHSA-hh56-x62g-gvhc cover?

GHSA-hh56-x62g-gvhc covers the following CVE IDs: CVE-2019-1010113. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hh56-x62g-gvhc?

GHSA-hh56-x62g-gvhc has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-hh56-x62g-gvhc?

GHSA-hh56-x62g-gvhc affects 1 product, including: nuget/CLEditor:\u003c= 1.4.5.

GHSA-hh56-x62g-gvhcMediumCVSS 6.1

Cross-site scripting in CLEditor

Vendor

GitHub Security Advisories

Published

July 26, 2019

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2019-1010113 →

📋 Description

Premium Software CLEditor 1.4.5 and earlier is affected by: Cross Site Scripting (XSS). The impact is: An attacker might be able to inject arbitrary html and script code into the web site. The component is: jQuery plug-in. The attack vector is: the victim must open a crafted href attribute of a link (A) element.

🎯 Affected products1

nuget/CLEditor:<= 1.4.5

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2019-1010113
https://drive.google.com/drive/folders/1UxgdL8SJO6KKnG3bh0-LTl7C6i41VwoW?usp=sharing
https://github.com/advisories/GHSA-hh56-x62g-gvhc