medium6.1
CVE-2022-2932
Cross site scripting in mobiledoc-kit
Impact
Cross-site Scripting (XSS) - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | mobiledoc-kit | < 0.14.2 | 0.14.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bdg | Mobiledoc Kit | before 0.14.2 |