Skip to content
OpenAdvisories

Product · npm

buttle

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2019-5422

    Cross-Site Scripting in buttle

    XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server.

    npm buttle buttle npm