Description
Versions of the package tarteaucitronjs before 1.17.0 are vulnerable to Cross-site Scripting (XSS) via the getElemWidth() and getElemHeight(). This is related to [SNYK-JS-TARTEAUCITRONJS-8366541](https://security.snyk.io/vuln/SNYK-JS-TARTEAUCITRONJS-8366541)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | tarteaucitronjs | < 1.17.0 | 1.17.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | tarteaucitronjs | < 1.17.0 | 1.17.0 | GHSA-8wp9-x25p-8794 |