CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-26149

Versions of the package quill-mention before 4.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization, via the renderList function. **Note:** If the mentions list is sourced from unsafe (user-sourced) data, this might allow an injection attack when a Quill user hits @.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.012

EPSS Ranking 78.3%

CVSS Severity

CVSS v3 Score 6.1

References

Products affected by CVE-2023-26149

Quill-Mention » Quill Mention » Version: N/A

cpe:2.3:a:quill-mention:quill_mention:-
Quill-Mention » Quill Mention » Version: 0.0.2

cpe:2.3:a:quill-mention:quill_mention:0.0.2
Quill-Mention » Quill Mention » Version: 0.1.0

cpe:2.3:a:quill-mention:quill_mention:0.1.0
Quill-Mention » Quill Mention » Version: 0.1.1

cpe:2.3:a:quill-mention:quill_mention:0.1.1
Quill-Mention » Quill Mention » Version: 0.1.2

cpe:2.3:a:quill-mention:quill_mention:0.1.2
Quill-Mention » Quill Mention » Version: 0.1.3

cpe:2.3:a:quill-mention:quill_mention:0.1.3
Quill-Mention » Quill Mention » Version: 0.1.4

cpe:2.3:a:quill-mention:quill_mention:0.1.4
Quill-Mention » Quill Mention » Version: 0.1.5

cpe:2.3:a:quill-mention:quill_mention:0.1.5
Quill-Mention » Quill Mention » Version: 0.1.6

cpe:2.3:a:quill-mention:quill_mention:0.1.6
Quill-Mention » Quill Mention » Version: 0.2.0

cpe:2.3:a:quill-mention:quill_mention:0.2.0
Quill-Mention » Quill Mention » Version: 0.2.1

cpe:2.3:a:quill-mention:quill_mention:0.2.1
Quill-Mention » Quill Mention » Version: 0.2.2

cpe:2.3:a:quill-mention:quill_mention:0.2.2
Quill-Mention » Quill Mention » Version: 0.2.3

cpe:2.3:a:quill-mention:quill_mention:0.2.3
Quill-Mention » Quill Mention » Version: 0.2.4

cpe:2.3:a:quill-mention:quill_mention:0.2.4
Quill-Mention » Quill Mention » Version: 0.2.5

cpe:2.3:a:quill-mention:quill_mention:0.2.5
Quill-Mention » Quill Mention » Version: 0.2.6

cpe:2.3:a:quill-mention:quill_mention:0.2.6
Quill-Mention » Quill Mention » Version: 0.2.7

cpe:2.3:a:quill-mention:quill_mention:0.2.7
Quill-Mention » Quill Mention » Version: 1.0.1

cpe:2.3:a:quill-mention:quill_mention:1.0.1
Quill-Mention » Quill Mention » Version: 1.0.2

cpe:2.3:a:quill-mention:quill_mention:1.0.2
Quill-Mention » Quill Mention » Version: 2.0.0

cpe:2.3:a:quill-mention:quill_mention:2.0.0
Quill-Mention » Quill Mention » Version: 2.0.1

cpe:2.3:a:quill-mention:quill_mention:2.0.1
Quill-Mention » Quill Mention » Version: 2.0.2

cpe:2.3:a:quill-mention:quill_mention:2.0.2
Quill-Mention » Quill Mention » Version: 2.0.3

cpe:2.3:a:quill-mention:quill_mention:2.0.3
Quill-Mention » Quill Mention » Version: 2.0.4

cpe:2.3:a:quill-mention:quill_mention:2.0.4
Quill-Mention » Quill Mention » Version: 2.0.5

cpe:2.3:a:quill-mention:quill_mention:2.0.5
Quill-Mention » Quill Mention » Version: 2.0.6

cpe:2.3:a:quill-mention:quill_mention:2.0.6
Quill-Mention » Quill Mention » Version: 2.0.7

cpe:2.3:a:quill-mention:quill_mention:2.0.7
Quill-Mention » Quill Mention » Version: 2.0.8

cpe:2.3:a:quill-mention:quill_mention:2.0.8
Quill-Mention » Quill Mention » Version: 2.0.9

cpe:2.3:a:quill-mention:quill_mention:2.0.9
Quill-Mention » Quill Mention » Version: 2.1.0

cpe:2.3:a:quill-mention:quill_mention:2.1.0
Quill-Mention » Quill Mention » Version: 2.1.1

cpe:2.3:a:quill-mention:quill_mention:2.1.1
Quill-Mention » Quill Mention » Version: 2.1.2

cpe:2.3:a:quill-mention:quill_mention:2.1.2
Quill-Mention » Quill Mention » Version: 2.1.3

cpe:2.3:a:quill-mention:quill_mention:2.1.3
Quill-Mention » Quill Mention » Version: 2.1.4

cpe:2.3:a:quill-mention:quill_mention:2.1.4
Quill-Mention » Quill Mention » Version: 2.1.5

cpe:2.3:a:quill-mention:quill_mention:2.1.5
Quill-Mention » Quill Mention » Version: 2.2.0

cpe:2.3:a:quill-mention:quill_mention:2.2.0
Quill-Mention » Quill Mention » Version: 2.2.1

cpe:2.3:a:quill-mention:quill_mention:2.2.1
Quill-Mention » Quill Mention » Version: 2.2.2

cpe:2.3:a:quill-mention:quill_mention:2.2.2
Quill-Mention » Quill Mention » Version: 2.2.3

cpe:2.3:a:quill-mention:quill_mention:2.2.3
Quill-Mention » Quill Mention » Version: 2.2.4

cpe:2.3:a:quill-mention:quill_mention:2.2.4
Quill-Mention » Quill Mention » Version: 2.2.5

cpe:2.3:a:quill-mention:quill_mention:2.2.5
Quill-Mention » Quill Mention » Version: 2.2.6

cpe:2.3:a:quill-mention:quill_mention:2.2.6
Quill-Mention » Quill Mention » Version: 2.2.7

cpe:2.3:a:quill-mention:quill_mention:2.2.7
Quill-Mention » Quill Mention » Version: 3.0.0

cpe:2.3:a:quill-mention:quill_mention:3.0.0
Quill-Mention » Quill Mention » Version: 3.0.1

cpe:2.3:a:quill-mention:quill_mention:3.0.1
Quill-Mention » Quill Mention » Version: 3.0.2

cpe:2.3:a:quill-mention:quill_mention:3.0.2
Quill-Mention » Quill Mention » Version: 3.0.3

cpe:2.3:a:quill-mention:quill_mention:3.0.3
Quill-Mention » Quill Mention » Version: 3.0.4

cpe:2.3:a:quill-mention:quill_mention:3.0.4
Quill-Mention » Quill Mention » Version: 3.0.5

cpe:2.3:a:quill-mention:quill_mention:3.0.5
Quill-Mention » Quill Mention » Version: 3.0.6

cpe:2.3:a:quill-mention:quill_mention:3.0.6
Quill-Mention » Quill Mention » Version: 3.0.7

cpe:2.3:a:quill-mention:quill_mention:3.0.7
Quill-Mention » Quill Mention » Version: 3.0.8

cpe:2.3:a:quill-mention:quill_mention:3.0.8
Quill-Mention » Quill Mention » Version: 3.0.9

cpe:2.3:a:quill-mention:quill_mention:3.0.9
Quill-Mention » Quill Mention » Version: 3.1.0

cpe:2.3:a:quill-mention:quill_mention:3.1.0
Quill-Mention » Quill Mention » Version: 3.2.0

cpe:2.3:a:quill-mention:quill_mention:3.2.0
Quill-Mention » Quill Mention » Version: 3.3.0

cpe:2.3:a:quill-mention:quill_mention:3.3.0
Quill-Mention » Quill Mention » Version: 3.4.0

cpe:2.3:a:quill-mention:quill_mention:3.4.0
Quill-Mention » Quill Mention » Version: 3.4.1

cpe:2.3:a:quill-mention:quill_mention:3.4.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-26149

Products

Pricing

Contact Us