← All advisories

Medium severity6.1NVD Advisory· Published Jul 14, 2023· Updated Jun 17, 2026

CVE-2023-3672

CVE-2023-3672

Description

Cross-site Scripting (XSS) - DOM in GitHub repository plaidweb/webmention.js prior to 0.5.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
webmention.jsnpm	< 0.5.5	0.5.5

Affected products

3

plaidweb/webmention.js2 versions
cpe:2.3:a:plaidweb:webmention.js:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:plaidweb:webmention.js:*:*:*:*:*:*:*:*range: <0.5.5
- (no CPE)range: unspecified
ghsa-coords
pkg:npm/webmention.js
Range: < 0.5.5

Patches

Vulnerability mechanics

References

5

github.com/plaidweb/webmention.js/commit/3551b66b3e40da37fee89ecf72930c5efdc53011nvdPatchWEB
huntr.dev/bounties/75cfb7ad-a75f-45ff-8688-32a9c55179aanvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-r54g-4qq6-chxgghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-3672ghsaADVISORY
github.com/PlaidWeb/webmention.js/blob/9457e71433c0d2430bbe767ecc5b5837140d0ee4/static/webmention.jsghsaWEB

News mentions

0

No linked articles in our index yet.