CVE-2021-32859

npm/baremetrics-calendar CVE-2021-32859: medium 6.1, EPSS 0.53%

Baremetrics date range picker vulnerable to Cross-site Scripting

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-465f-mxxh-grc4
• https://nvd.nist.gov/vuln/detail/CVE-2021-32859
• https://github.com/Baremetrics/calendar
• https://github.com/Baremetrics/calendar/blob/240c20134ffbf0f0f246a50feff2be1ff19cf349/public/js/Calendar.js#L724
• https://securitylab.github.com/advisories/GHSL-2021-1042_Baremetrics_Date_Range_Picker

CVE-2021-32859 · published 2023-02-21T15:30:23Z · modified 2023-11-08T04:06:02.661898Z · JSON