CVE-2022-0087

keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Score

CVSS 3.0 7.1 High

Status

Modified - security@huntr.dev

Published

2022-01-12

Last modified

2024-08-02

Weaknesses

CWE-79

Affected products

• Keystone (Keystonejs)
• Keystonejskeystone (Keystonejs)

References

• https://github.com/keystonejs/keystone/commit/96bf833a23b1a0a5d365cf394467a943cc481b38
• https://huntr.dev/bounties/c9d7374f-2cb9-4bac-9c90-a965942f413e