CVE-2023-1245

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in go/github.com/answerdev/answer

Identifiers

GHSA-6c32-3x46-m9rh, CVE-2023-1245

Package Slug

go/github.com/answerdev/answer

Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Description

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Affected Versions

All versions before 1.0.6

Solution

Upgrade to version 1.0.6 or above.

Last Modified

2023-03-08

source