CVE-2022-21802

Cross-site Scripting (XSS)

Medium · published July 25, 2022

CVSS v3.1
5.4
EPSS
1%
Percentile
56.0
In the wild
Unconfirmed
What it is

The package grapesjs before 0.19.5 are vulnerable to Cross-site Scripting (XSS) due to an improper sanitization of the class name in Selector Manager.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P
CVSS v4.0
Not supplied
EPSS
0.00796 · 56.0th percentile
Published
2022-07-25T13:45Z
EPSS history
Timeline
  • 25 JUL 13:45Z
    Cross-site Scripting (XSS)
    cvelistv5