Skip to content
OpenAdvisories

Package · npm

jquery.json-viewer

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    CVE-2022-30241

    Cross-site Scripting in jquery.json-viewer

    The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.

    jquery.json-viewer npm
  • High —
    GHSA-v9wp-8r97-v6xg

    Cross-Site Scripting in jquery.json-viewer

    Versions of `jquery.json-viewer` prior to 1.3.0 are vulnerable to Cross-Site Scripting (XSS). The package insufficiently sanitizes user input when creating links, and concatenates the user input in an `<a>` tag. This allows attackers to create malicious links…

    jquery.json-viewer npm