Skip to content
OpenAdvisories

Package · npm

ids-enterprise

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High —
    GHSA-49r3-3h96-rwj6

    Cross-Site Scripting in ids-enterprise

    Versions of `ids-enterprise` prior to 4.18.2 are vulnerable to Cross-Site Scripting (XSS). The `soho-dropdown` component does not properly encode its output and may allow attackers to execute arbitrary JavaScript. ## Recommendation Upgrade to version 4.18.2 o…

    ids-enterprise npm
  • High —
    GHSA-hpfq-8wx8-cgqw

    Cross-Site Scripting in ids-enterprise

    Versions of `ids-enterprise` prior to 4.18.2 are vulnerable to Cross-Site Scripting (XSS). The `modal` component fails to sanitize input to the `title` attribute, which may allow attackers to execute arbitrary JavaScript. ## Recommendation Upgrade to version …

    ids-enterprise npm
  • High —
    GHSA-crfx-5phg-hmw9

    Cross-Site Scripting in ids-enterprise

    Versions of `ids-enterprise` prior to 4.18.2 are vulnerable to Cross-Site Scripting (XSS). Script tags in the `soho-autocomplete` component are not properly encoded and may allow attackers to execute arbitrary JavaScript. ## Recommendation Upgrade to version …

    ids-enterprise npm