Description
selectize-plugin-a11y before 1.1.0 has XSS via the msg field.
Remediation
References
https://github.com/SLMNBJ/selectize-plugin-a11y/pull/9
https://www.npmjs.com/package/selectize-plugin-a11y/v/1.1.0
Related Vulnerabilities
CVE-2023-37905 Vulnerability in npm package ckeditor-wordcount-plugin
CVE-2022-24999 Vulnerability in maven package org.webjars:qs
CVE-2021-3820 Vulnerability in npm package i
CVE-2021-31635 Vulnerability in maven package com.jfinal:jfinal
CVE-2023-35159 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates