Description

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8.

Remediation

References

https://github.com/grails-fields-plugin/grails-fields/issues/278

https://github.com/martinfrancois/CVE-2018-1000529

Related Vulnerabilities

CVE-2022-45136 Vulnerability in maven package org.apache.jena:jena-sdb

CVE-2023-35839 Vulnerability in maven package org.noear:solon.serialization.hessian

CVE-2022-22968 Vulnerability in maven package org.springframework:spring-context

CVE-2023-32315 Vulnerability in maven package org.igniterealtime.openfire:xmppserver

CVE-2020-36732 Vulnerability in npm package crypto-js

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Exploit Third Party Advisory