Skip to content
OpenAdvisories
Medium · 6.1 CVE-2018-16474 EUVD-2018-0759GHSA-jhgp-hvj6-x2p2

Stored Cross-Site Scripting in tianma-static

Published Nov 6, 2018 · Updated Aug 5, 2024 · Assigned by hackerone

Vendor: npm Product: tianma-static Package: tianma-static Ecosystem: npm

Description

A stored xss in tianma-static module versions <=1.0.4 allows an attacker to execute arbitrary javascript.

Affected products

VendorProductAffectedFixed
npm tianma-static <=1.0.4 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm tianma-static <= 1.0.4 — GHSA-jhgp-hvj6-x2p2

References