What is GHSA-r54g-4qq6-chxg?

GHSA-r54g-4qq6-chxg is a security advisory published by GitHub Security Advisories with High severity. webmention.js Cross-site Scripting vulnerability

Which CVE IDs does GHSA-r54g-4qq6-chxg cover?

GHSA-r54g-4qq6-chxg covers the following CVE IDs: CVE-2023-3672. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r54g-4qq6-chxg?

GHSA-r54g-4qq6-chxg has a CVSS v3 base score of 7.3, published by GitHub Security Advisories.

Which products are affected by GHSA-r54g-4qq6-chxg?

GHSA-r54g-4qq6-chxg affects 1 product, including: npm/webmention.js:\u003c 0.5.5.

GHSA-r54g-4qq6-chxgHighCVSS 7.3

webmention.js Cross-site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

July 14, 2023

Last Modified

November 4, 2023

🔗 CVE IDs covered (1)

CVE-2023-3672 →

📋 Description

webmention.js prior to 0.5.5 is vulnerable to cross-site scripting.

🎯 Affected products1

npm/webmention.js:< 0.5.5

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2023-3672
https://github.com/plaidweb/webmention.js/commit/3551b66b3e40da37fee89ecf72930c5efdc53011
https://huntr.dev/bounties/75cfb7ad-a75f-45ff-8688-32a9c55179aa
https://github.com/PlaidWeb/webmention.js/blob/9457e71433c0d2430bbe767ecc5b5837140d0ee4/static/webmention.js#L330
https://github.com/advisories/GHSA-r54g-4qq6-chxg