Description
In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted setAttribute('href',href) call. NOTE: some parties feel that the code change only addresses a warning message from a SAST tool and does not fix a vulnerability.
Remediation
References
Related Vulnerabilities
WordPress Plugin Viral Quiz Maker-OnionBuzz SQL Injection (1.2.1)
WordPress Plugin Simple Backup Arbitrary File Download (2.7.10)
WordPress Plugin PowerPack Lite for Beaver Builder Cross-Site Scripting (1.2.9.2)
WordPress Plugin Easy FancyBox Cross-Site Scripting (1.8.17)
WordPress Plugin Ultimate Category Excluder Cross-Site Request Forgery (1.1)