Search for packages
| purl | pkg:composer/datatables/datatables@1.10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6g3a-fs52-gfcp
Aliases: CVE-2015-6584 GHSA-4mv4-gmmf-q382 |
XSS vulnerability By exploiting a Cross-site scripting vulnerability the attacker can hijack a logged in user’s session. This means that the malicious hacker can change the logged in user’s password and invalidate the session of the victim while the hacker maintains access. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-np26-hprc-gbcf | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Cross Site Scripting (XSS) vulnerability in the DataTables plug-in 1.9.2 for jQuery allows attackers to run arbitrary code via the sBaseName parameter to function `_fnCreateCookie`. NOTE: 1.9.2 is a version from 2012. |
CVE-2021-36713
|