medium6.1
CVE-2024-0758
MolecularFaces before 0.3.0 is vulnerable to cross site scripting.
Impact
MolecularFaces before 0.3.0 is vulnerable to cross site scripting. A remote attacker can execute arbitrary JavaScript in the context of a victim browser via crafted molfiles.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipb-Halle | Molecularfaces | before 0.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/advisories/GHSA-2pwh-52h7-7j84
- https://github.com/ipb-halle/MolecularFaces/security/advisories/GHSA-2pwh-52h7-7j84
- https://vulncheck.com/advisories/vc-advisory-GHSA-2pwh-52h7-7j84
- https://github.com/advisories/GHSA-2pwh-52h7-7j84
- https://github.com/ipb-halle/MolecularFaces/security/advisories/GHSA-2pwh-52h7-7j84
- https://vulncheck.com/advisories/vc-advisory-GHSA-2pwh-52h7-7j84