Description
peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Remediation
References
https://github.com/chocobozzz/peertube/commit/0ea2f79d45b301fcd660efc894469a99b2239bf6
https://huntr.dev/bounties/282807a8-4bf5-4fe2-af62-e05f945b3d65
Related Vulnerabilities
CVE-2022-21670 Vulnerability in npm package markdown-it
CVE-2020-5398 Vulnerability in maven package org.springframework:spring-web
CVE-2020-14062 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2021-21252 Vulnerability in npm package jquery-validation
CVE-2020-25649 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind