org.primefaces:primefaces 10.0.25-LTS vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the org.primefaces:primefaces package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
M Cross-site Scripting (XSS) org.primefaces:primefaces is an ultimate component suite for JavaServer Faces. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the attribute `label` of `p:chip`. How to fix Cross-site Scripting (XSS)? Upgrade `org.primefaces:primefaces` to version 12.0.0-RC1 or higher.	[0,12.0.0-RC1)
M Cross-site Scripting (XSS) org.primefaces:primefaces is an ultimate component suite for JavaServer Faces. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the attribute `value` of `p:tag`. How to fix Cross-site Scripting (XSS)? Upgrade `org.primefaces:primefaces` to version 12.0.0-RC1 or higher.	[0,12.0.0-RC1)
M Cross-site Scripting (XSS) org.primefaces:primefaces is an ultimate component suite for JavaServer Faces. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the attributes `value` and `label` in `AutoCompleteSuggestion` used by REST endpoints in conjunction with `p:autoComplete`. How to fix Cross-site Scripting (XSS)? Upgrade `org.primefaces:primefaces` to version 12.0.0-RC1 or higher.	[0,12.0.0-RC1)
M Cross-site Scripting (XSS) org.primefaces:primefaces is an ultimate component suite for JavaServer Faces. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the attribute `value` of `p:badge` How to fix Cross-site Scripting (XSS)? Upgrade `org.primefaces:primefaces` to version 12.0.0-RC1 or higher.	[0,12.0.0-RC1)
M Cross-site Scripting (XSS) org.primefaces:primefaces is an ultimate component suite for JavaServer Faces. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the attribute `value` of `p:menuItem` inside `p:stack`. How to fix Cross-site Scripting (XSS)? Upgrade `org.primefaces:primefaces` to version 12.0.0-RC1 or higher.	[0,12.0.0-RC1)

Vulnerability

Vulnerable Version

Cross-site Scripting (XSS)

org.primefaces:primefaces is an ultimate component suite for JavaServer Faces.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the attribute label of p:chip.

How to fix Cross-site Scripting (XSS)?