Server side cross-site scripting In bracket-template
Description
Cross-Site Scripting in bracket-template
All versions of bracket-template are vulnerable to stored cross-site scripting (XSS). This is exploitable when a variable passed in via a GET parameter is used in a template.
Recommendation
No fix is currently available for this vulnerability. It is our recommendation to not install or use this module at this time.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version |
|---|---|---|
 npm |
Aliases
1.
References
1. 2.