CVE-2021-23445

Cross-site Scripting (XSS)

Low · published September 27, 2021

CVSS v3.1
3.1
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P
CVSS v4.0
Not supplied
EPSS
0.01975 · 80.3th percentile
Published
2021-09-27T16:35Z
EPSS history
Timeline
  • 27 SEP 16:35Z
    Cross-site Scripting (XSS)
    cvelistv5