Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-23458 EUVD-2022-6765GHSA-9rwj-9j2h-fhvm

Toast UI Grid vulnerable to Cross-site scripting

Published Sep 22, 2022 · Updated Apr 22, 2025 · Assigned by GitHub_M

Description

Toast UI Grid is a component to display and edit data. Versions prior to 4.21.3 are vulnerable to cross-site scripting attacks when pasting specially crafted content into editable cells. This issue was fixed in version 4.21.3. There are no known workarounds.

Affected products

VendorProductAffectedFixed
nhn tui.grid 4.21.3 – < 4.21.3 4.21.3

Affected packages

EcosystemPackageAffectedFixedRecord
npm tui-grid < 4.21.3 4.21.3 GHSA-9rwj-9j2h-fhvm

References