Description
Cross Site Scripting (XSS) vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | valine | < 1.4.15 | 1.4.15 | GHSA-6xvq-2gj8-4276 |
Medium · 5.4
CVE-2020-28847
EUVD-2022-1658GHSA-6xvq-2gj8-4276
Cross site scripting in valine
Published Apr 5, 2022 · Updated Aug 4, 2024 · Assigned by mitre