Toast UI Grid vulnerable to Cross-site Scripting

MEDIUM 6.1CVE-2022-23458 · GHSA-9rwj-9j2h-fhvm · Published 22/09/2022 · updated 17/06/2026

In short

CVE-2022-23458 is a MEDIUM (CVSS 6.1) vulnerability affecting toast ui grid (nhn), tui-grid.
Chance of exploitation in the next 30 days (EPSS): 0.67%, higher than 52.1% of all vulnerabilities.
Fix: update to 4.21.3 or later.

Package	Affected versions	Patched versions
toast ui grid nhn	`< 4.21.3`	`4.21.3`
tui-grid npm	`< 4.21.3`	`4.21.3`

Description

Toast UI Grid is a component to display and edit data. Versions prior to 4.21.3 are vulnerable to cross-site scripting attacks when pasting specially crafted content into editable cells. This issue was fixed in version 4.21.3. There are no known workarounds.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2022-23458 · ADVISORY
nhn/tui.grid commit e9db596 · WEB
nhn/tui.grid · PACKAGE
securitylab.github.com/advisories/GHSL-2022-029_nhn_tui_grid · ADVISORY
securitylab.github.com/advisories/GHSL-2022-029_nhn_tui_grid · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free