Описание
Duplicate Advisory: MathLive's Lack of Escaping of HTML allows for XSS
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-qwj6-q94f-8425. This link is maintained to preserve external references.
Original Description
Cross Site Scripting vulnerability in arnog MathLive Versions v0.103.0 and before (fixed in 0.104.0) allows an attacker to execute arbitrary code via the MathLive function.
Пакеты
Наименование
mathlive
npm
Затронутые версииВерсия исправления
< 0.104.0
0.104.0
6.3 Medium
CVSS3
Дефекты
CWE-79
6.3 Medium
CVSS3
Дефекты
CWE-79