Skip to content
OpenAdvisories
Medium · 6.1 CVE-2018-3735 EUVD-2018-0221GHSA-488m-6gh8-9j36

bracket-template vulnerable to reflected XSS

Published Jun 7, 2018 · Updated Sep 16, 2024 · Assigned by hackerone

Vendor: HackerOne Product: bracket-template node module Package: bracket-template Ecosystem: npm

Description

bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template

Affected products

VendorProductAffectedFixed
HackerOne bracket-template node module Versions up to and including 1.1.5 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm bracket-template <= 1.1.5 — GHSA-488m-6gh8-9j36

References