Skip to content
OpenAdvisories

Vendor

jstachio

1 known vulnerabilities.

Products

jstachio 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2023-33962 Public exploit

    JStachio XSS vulnerability: Unescaped single quotes

    JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes `'` in HTML, allowing an attacker to inject malicious code. This vulnerability can be exploited by an attacker to execute arbitrary JavaScr…

    jstachio jstachio io.jstach:jstachio Maven