Medium severityNVD Advisory· Published Sep 1, 2020· Updated Sep 23, 2021
Cross-Site Scripting in c3
CVE-2016-1000240
Description
Affected versions of c3 are vulnerable to cross-site scripting via improper sanitization of HTML in rendered tooltips.
Recommendation
Update to 0.4.11 or later.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
c3npm | < 0.4.11 | 0.4.11 |
Affected products
1Patches
Vulnerability mechanics
References
6News mentions
0No linked articles in our index yet.