Lucene search
GoogleOSV:CVE-2023-30792HistoryApr 29, 2023 - 3:15 a.m.
CVE-2023-30792
2023-04-2903:15:08
Google
osv.dev
2
cross-site scripting
anchor tag
untrusted input
security vulnerability
software
Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where input was being parsed from untrusted sources.
Related
cvelist
cvelist
CVE-2023-30792
2023-04-29 02:21:49
prion
prion
Cross site scripting
2023-04-29 03:15:00
nvd
nvd
CVE-2023-30792
2023-04-29 03:15:08
veracode
veracode
Cross-site Scripting (XSS)
2023-05-08 02:18:01
cve
cve
CVE-2023-30792
2023-04-29 03:15:08