Skip to content
OpenAdvisories

Vendor

joeattardi

1 known vulnerabilities.

Products

emoji-button 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2021-43785

    Cross Site Scripting Vulnerability in @joeattardi/emoji-button

    @joeattardi/emoji-button is a Vanilla JavaScript emoji picker component. In affected versions there are two vectors for XSS attacks: a URL for a custom emoji, and an i18n string. In both of these cases, a value can be crafted such that it can insert a `script…

    joeattardi emoji-button @joeattardi/emoji-button npm