Description
XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | shave | < 2.5.3 | 2.5.3 | GHSA-gh4g-3gm9-5wrq |
Medium · 6.1
CVE-2019-12313
EUVD-2019-0465GHSA-gh4g-3gm9-5wrq
Cross-Site Scripting in shave
Published May 24, 2019 · Updated Aug 4, 2024 · Assigned by mitre