Skip to content
OpenAdvisories

Vendor

pivotick

8 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.2

    DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick

    Pivotick contains a DOM-based cross-site scripting vulnerability in its generic UI element resolution and icon-rendering utilities. The tryResolveHTMLElement function treated any resolved string as HTML markup by assigning it to a <template> element through i…