medium6.1
CVE-2023-46998
Bootbox.js Cross Site Scripting vulnerability
Impact
Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), prompt() functions.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | bootbox | >= 3.2.0, <= 6.0.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bootboxjs | Bootbox | from 3.2.0 through 6.0.0 |