5.4
Medium
CVE-2022-21802 The package grapesjs before 0.19.5 are vulnerable to Cross-site Scripting (XSS) due to an improper sanitization of the…
Description
The package grapesjs before 0.19.5 are vulnerable to Cross-site Scripting (XSS) due to an improper sanitization of the class name in Selector Manager.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| grapesjs 0.19 | earliest → < 0.19.5 | 0.19.5 |