Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 21/02/2023 Updated: 02/03/2023

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 0

iziModal is a modal plugin with jQuery. Versions before 1.6.1 are vulnerable to cross-site scripting (XSS) when handling untrusted modal titles. An attacker who is able to influence the field `title` when creating a `iziModal` instance is able to supply arbitrary `html` or `javascript` code that will be rendered in the context of a user, potentially leading to `XSS`. Version 1.6.1 contains a patch for this issue

Vulnerable Product	Search on Vulmon	Subscribe to Product
izimodal project izimodal

CWE-79 https://github.com/marcelodolza/iziModal/issues/249 https://github.com/marcelodolza/iziModal/commit/01728ac52bac5c1b4512087dafe0ad8b091fdc9e https://securitylab.github.com/advisories/GHSL-2021-1044_iziModal/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-32860

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect