CVE-2021-23472 — Cross-site Scripting (XSS)
This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHT…
Published: 2021-11-03 · CVSS: 3.1 · CVSS 3.1
This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array (instead of a string) even if the escape attribute is set.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7