Description
Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), prompt() functions.
Remediation
References
https://github.com/bootboxjs/bootbox/issues/661
https://github.com/soy-oreocato/CVE-2023-46998/
Related Vulnerabilities
CVE-2023-25653 Vulnerability in maven package org.webjars.npm:node-jose
CVE-2017-16029 Vulnerability in npm package hostr
CVE-2022-36889 Vulnerability in maven package org.jenkins-ci.plugins:deployer-framework
CVE-2019-11777 Vulnerability in maven package org.eclipse.paho:org.eclipse.paho.client.mqttv3
CVE-2022-24999 Vulnerability in maven package org.webjars.bower:qs