CVE-2017-16008CWE-79

i18next is a language translation framework

published June 4, 2018

CVSS
—
EPSS
1%
Percentile
57.5
In the wild
Unconfirmed
What it is

i18next is a language translation framework. Because of how the interpolation is implemented, making replacements from the dictionary one at a time, untrusted user input can use the name of one of the dictionary keys to inject script into the browser. This affects i18next <=1.10.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00849 · 57.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2018-06-04T19:00Z
EPSS history
Timeline
  • 04 JUN 19:00Z
    i18next is a language translation framework
    cvelistv5