AIKIDO-2024-10350

gridstack is vulnerable to Cross-site Scripting (XSS)

Cross-site Scripting (XSS) Pre-CVE Published Oct 21, 2024

Low Risk

This Affects:

gridstack

0.1.0 - 10.3.1

Fixed in 11.0.0

Are you affected? Scan for Free

TL;DR

Affected versions of the package are vulnerable to Cross-site Scripting (XSS) due to the use of innerHTML with user input without proper sanitization.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

gridstack is vulnerable to Cross-site Scripting (XSS) in versions 0.1.0 - 10.3.1.

How to fix this

Upgrade the gridstack library to the patch version.

Low Risk

This Affects:

gridstack

0.1.0 - 10.3.1

Fixed in 11.0.0

Are you affected? Scan for Free

Links

github.com/gridstack/gridstack.js/releases/tag/v11.0.0

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Scan for Free

Book a Demo

Free. No credit card required.

Company

Resources

Industries

Use Cases

Compare

Legal

Connect

hello@aikido.dev

Security

Stay up to date with all updates

I consent to receiving marketing communications based on Aikido’s Privacy Policy.

LinkedIn YouTube X

Keizer Karelstraat 15, 9000, Ghent, Belgium

95 Third St, 2nd Fl, San Francisco, CA 94103, US

Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK

Ghent, Belgium | San Francisco, US