Description
peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Remediation
References
https://github.com/chocobozzz/peertube/commit/0ea2f79d45b301fcd660efc894469a99b2239bf6
https://huntr.dev/bounties/282807a8-4bf5-4fe2-af62-e05f945b3d65
Related Vulnerabilities
CVE-2018-9206 Vulnerability in maven package org.webjars.npm:blueimp-file-upload
CVE-2022-2596 Vulnerability in npm package node-fetch
CVE-2016-10531 Vulnerability in maven package org.webjars.bower:marked
CVE-2022-34305 Vulnerability in maven package org.apache.tomcat:tomcat
CVE-2023-26156 Vulnerability in maven package org.webjars.npm:chromedriver