Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/datatables/datatables@1.10.0
purl pkg:composer/datatables/datatables@1.10.0
Next non-vulnerable version 1.10.10
Latest non-vulnerable version 1.10.10
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-6g3a-fs52-gfcp
Aliases:
CVE-2015-6584
GHSA-4mv4-gmmf-q382
XSS vulnerability By exploiting a Cross-site scripting vulnerability the attacker can hijack a logged in user’s session. This means that the malicious hacker can change the logged in user’s password and invalidate the session of the victim while the hacker maintains access.
1.10.10
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-np26-hprc-gbcf Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Cross Site Scripting (XSS) vulnerability in the DataTables plug-in 1.9.2 for jQuery allows attackers to run arbitrary code via the sBaseName parameter to function `_fnCreateCookie`. NOTE: 1.9.2 is a version from 2012. CVE-2021-36713