CVE-2018-25050
1 advisory.
Packagist/harvesthq/chosen CVE-2018-25050: medium 6.1, EPSS 0.63%
Harvest Chosen vulnerable to Cross-site Scripting
Action: Upgrade harvesthq/chosen to 1.8.7 or later.
composer require harvesthq/chosen:1.8.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.7 | - |
Fixed versions
| 1.8.7 |
Sources
- osv: GHSA-x5q4-m45m-fm94
- https://nvd.nist.gov/vuln/detail/CVE-2018-25050
- https://github.com/harvesthq/chosen/pull/2997
- https://github.com/harvesthq/chosen/commit/77fd031d541e77510268d1041ed37798fdd1017e
- https://github.com/harvesthq/chosen
- https://github.com/harvesthq/chosen/releases/tag/v1.8.7
- https://vuldb.com/?ctiid.216956
- https://vuldb.com/?id.216956
CVE-2018-25050 · published · modified · JSON