Cross site scripting in valine

MEDIO 5.4CVE-2020-28847 · GHSA-6xvq-2gj8-4276 · Published 05/04/2022 · updated 17/06/2026

In breve

CVE-2020-28847 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda valine (valine.js), valine.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.47%, superiore al 40.8% delle vulnerabilità.
Correzione: aggiornare a 1.4.15 o successiva.

Package	Affected versions	Patched versions
valine valine.js	`= 1.4.14`	No fix yet
valine npm	`< 1.4.15`	`1.4.15`

Description

valine is a fast, simple & powerful comment system. Cross Site Scripting (XSS) vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment. A fix was released in version 1.4.15.

NVD description

Cross Site Scripting (XSS) vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment.

References

nvd.nist.gov/vuln/detail/CVE-2020-28847 · ADVISORY
xCss/Valine · WEB
xCss/Valine · PACKAGE
xCss/Valine release v1.4.15 · WEB

Altre vulnerabilità di valine

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

valine

valine.js

= 1.4.14

No fix yet

valine

npm

< 1.4.15

1.4.15

Description

valine is a fast, simple & powerful comment system. Cross Site Scripting (XSS) vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment. A fix was released in version 1.4.15.

NVD description

Cross Site Scripting (XSS) vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment.

Altre vulnerabilità di valine

Vedi tutto →