Cross site scripting in mobiledoc-kit

MEDIO 6.1CVE-2022-2932 · GHSA-hw2p-xqhq-3mjf · Published 22/08/2022 · updated 17/06/2026

In breve

CVE-2022-2932 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda mobiledoc kit (bdg), mobiledoc-kit.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.92%, superiore al 60.4% delle vulnerabilità.
Correzione: aggiornare a 0.14.2 o successiva.

Package	Affected versions	Patched versions
mobiledoc kit bdg	`< 0.14.2`	`0.14.2`
mobiledoc-kit npm	`< 0.14.2`	`0.14.2`

Cross-site Scripting (XSS) - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2.

NVD description

Cross-site Scripting (XSS) - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.