Description

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8.

Remediation

References

https://github.com/grails-fields-plugin/grails-fields/issues/278

https://github.com/martinfrancois/CVE-2018-1000529

Related Vulnerabilities

CVE-2022-28355 Vulnerability in maven package org.scala-js:scalajs-library_2.13

CVE-2022-24785 Vulnerability in maven package org.webjars.bowergithub.moment:moment

CVE-2020-36184 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind

CVE-2008-6681 Vulnerability in maven package org.dojotoolkit:dojo

CVE-2017-16010 Vulnerability in npm package i18next

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Exploit Third Party Advisory