Description
peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Remediation
References
https://huntr.dev/bounties/282807a8-4bf5-4fe2-af62-e05f945b3d65
https://github.com/chocobozzz/peertube/commit/0ea2f79d45b301fcd660efc894469a99b2239bf6
Related Vulnerabilities
CVE-2021-23374 Vulnerability in npm package ps-visitor
CVE-2022-24728 Vulnerability in maven package org.webjars.bowergithub.ckeditor:ckeditor4
CVE-2023-46604 Vulnerability in maven package org.apache.activemq:activemq-client
CVE-2023-24057 Vulnerability in maven package ca.uhn.hapi.fhir:org.hl7.fhir.r5
CVE-2021-4329 Vulnerability in maven package org.webjars.npm:json-logic-js