GHSA-hpfq-8wx8-cgqw
Cross-Site Scripting in ids-enterprise
GHSA-hpfq-8wx8-cgqw is a vulnerability with no CVSS score yet in ids-enterprise, published June 13, 2019. No source lists public exploit code. Fixed in ids-enterprise 4.18.2.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
4.18.2ids-enterprise
Description
Versions of ids-enterprise prior to 4.18.2 are vulnerable to Cross-Site Scripting (XSS). The modal component fails to sanitize input to the title attribute, which may allow attackers to execute arbitrary JavaScript.
Recommendation
Upgrade to version 4.18.2 or later
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ids-enterprisenpm | before 4.18.2 | 4.18.2 |
What each source reports
GitHub AdvisoriesNo score
Cross-Site Scripting in ids-enterprise
Versions of ids-enterprise prior to 4.18.2 are vulnerable to Cross-Site Scripting (XSS). The modal component fails to sanitize input to the title attribute, which may allow attackers to execute arbitrary JavaScript.
Recommendation
Upgrade to version 4.18.2 or later
- Record
GHSA-hpfq-8wx8-cgqw- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVNo score
Cross-Site Scripting in ids-enterprise
Versions of ids-enterprise prior to 4.18.2 are vulnerable to Cross-Site Scripting (XSS). The modal component fails to sanitize input to the title attribute, which may allow attackers to execute arbitrary JavaScript.
Recommendation
Upgrade to version 4.18.2 or later
- Record
GHSA-hpfq-8wx8-cgqw- Weakness
- CWE-79
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.