Skip to content

Product

debian/datatables.js vulnerabilities

3 published CVES affecting debian/datatables.js, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
2
Low
0
Unscored
1
CISA KEV
0

Latest debian/datatables.js CVEs

Newest publication first

  2. CVE-2021-23445 Cross-site Scripting (XSS)

    Published
    MediumCVSS 6.1 EPSS 2.0%

    This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.

  3. CVE-2015-6584 DataTable Vulnerable to Cross-Site Scripting

    Published
    MediumCVSS 4.3 EPSS 2.7% Public exploit

    Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unit_testing/templates/6776.php.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.