Skip to content
OpenAdvisories

Package · npm

jquery.json-viewer

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High —

    Cross-Site Scripting in jquery.json-viewer

    Versions of `jquery.json-viewer` prior to 1.3.0 are vulnerable to Cross-Site Scripting (XSS). The package insufficiently sanitizes user input when creating links, and concatenates the user input in an `<a>` tag. This allows attackers to create malicious links…