Description

Grails Fields plugin version 2.2.7 contains a Cross Site Scripting (XSS) vulnerability in Using the display tag that can result in XSS . This vulnerability appears to have been fixed in 2.2.8.

Remediation

References

https://github.com/grails-fields-plugin/grails-fields/issues/278

https://github.com/martinfrancois/CVE-2018-1000529

Related Vulnerabilities

CVE-2021-23470 Vulnerability in npm package putil-merge

CVE-2019-11002 Vulnerability in npm package materialize-css

CVE-2010-1622 Vulnerability in maven package org.springframework:spring-beans

CVE-2020-17530 Vulnerability in maven package org.apache.struts:struts2-core

CVE-2020-21176 Vulnerability in npm package thinkjs

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Exploit Third Party Advisory