CVE-2016-1000240 Cross-Site Scripting in c3
Unknown
- Published
- Unknown
- Updated
- Exploit status
- No public exploit known
Description
Affected versions of c3 are vulnerable to cross-site scripting via improper sanitization of HTML in rendered tooltips.
Recommendation
Update to 0.4.11 or later.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm c3(npm) | <= 0.4.10 | No fix listed |
References
- github.com
- www.npmjs.com
- nvd.nist.gov third-party-advisory
- github.com patch
- github.com patch
- github.com