medium6.1
CVE-2022-23458
Toast UI Grid vulnerable to Cross-site Scripting
Impact
Toast UI Grid is a component to display and edit data. Versions prior to 4.21.3 are vulnerable to cross-site scripting attacks when pasting specially crafted content into editable cells. This issue was fixed in version 4.21.3. There are no known workarounds.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | tui-grid | < 4.21.3 | 4.21.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nhn | Toast Ui Grid | before 4.21.3 |