Skip to content
OpenAdvisories

Vendor

Baremetrics

1 known vulnerabilities.

Products

baremetrics-calendar 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2021-32859

    Baremetrics date range picker vulnerable to Cross-site Scripting

    The Baremetrics date range picker is a solution for selecting both date ranges and single dates from a single calender view. Versions 1.0.14 and prior are prone to cross-site scripting (XSS) when handling untrusted `placeholder` entries. An attacker who is ab…

    Baremetrics baremetrics-calendar baremetrics-calendar npm