medium6.1
CVE-2021-28079
Jamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability.
Impact
Jamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability. The column-name is vulnerable to XSS in the ElectronJS Framework. An attacker can make a .omv (Jamovi) document containing a payload. When opened by victim, the payload is triggered.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jamovi | Jamovi | through 1.6.18 |