| Package | Affected versions | Patched versions |
|---|---|---|
| css validator | ≤ 2020-01-19 |
In CSS Validator less than or equal to commit 54d68a1, there is a cross-site scripting vulnerability in handling URIs. A user would have to click on a specifically crafted validator link to trigger it. This has been patched in commit e5c09a9.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free