What is GHSA-qp2q-6h9j-jg2r?

GHSA-qp2q-6h9j-jg2r is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site Scripting in jquery.json-viewer

Which CVE IDs does GHSA-qp2q-6h9j-jg2r cover?

GHSA-qp2q-6h9j-jg2r covers the following CVE IDs: CVE-2022-30241. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qp2q-6h9j-jg2r?

GHSA-qp2q-6h9j-jg2r has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-qp2q-6h9j-jg2r?

GHSA-qp2q-6h9j-jg2r affects 1 product, including: npm/jquery.json-viewer:\u003c 1.5.0.

GHSA-qp2q-6h9j-jg2rMediumCVSS 6.1

Cross-site Scripting in jquery.json-viewer

Vendor

GitHub Security Advisories

Published

May 5, 2022

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2022-30241 →

📋 Description

The jquery.json-viewer library before version 1.5.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.

🎯 Affected products1

npm/jquery.json-viewer:< 1.5.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-30241
https://github.com/abodelot/jquery.json-viewer/pull/26
https://www.npmjs.com/package/jquery.json-viewer
https://github.com/abodelot/jquery.json-viewer/releases/tag/v1.5.0
https://github.com/advisories/GHSA-qp2q-6h9j-jg2r