Skip to content
OpenAdvisories
High · 7.6 CVE-2022-1291 EUVD-2022-1770GHSA-j636-crp3-m584

XSS vulnerability with default `onCellHtmlData` function in hhurz/tableexport.jquery.plugin

Published Apr 10, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Description

XSS vulnerability with default `onCellHtmlData` function in GitHub repository hhurz/tableexport.jquery.plugin prior to 1.25.0. Transmitting cookies to third-party servers. Sending data from secure sessions to third-party servers

Affected products

VendorProductAffectedFixed
hhurz hhurz/tableexport.jquery.plugin unspecified – < 1.25.0 1.25.0

Affected packages

EcosystemPackageAffectedFixedRecord
npm tableexport.jquery.plugin < 1.25.0 1.25.0 GHSA-j636-crp3-m584

References