5.4
Medium
CVE-2022-25979 Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input…
Description
Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization in the Editor() function.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| jsuites 5.0 | earliest → < 5.0.1 | 5.0.1 |
| org.webjars.npm:jsuites | Versions not published |