GHSA-jfcc-rm7f-xgf8MediumCVSS 6.5Disclosed before NVD

Cross-Site Scripting in mavon-editor

Published
September 3, 2020
Last Modified
January 9, 2023

📋 Description

All versions of mavon-editor are vulnerable to Cross-Site Scripting. The package fails to sanitize entered input, allowing attackers to execute arbitrary JavaScript in a victim's browser.

Recommendation

No fix is currently available. Consider using an alternative package until a fix is made available.

🎯 Affected products1

  • npm/mavon-editor:< 2.8.2

🔗 References (7)