The jquery.json-viewer library up to and including 1.4.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
jquery json-viewer project jquery json-viewer |