4.26.0
4 years ago
7 days ago
Known vulnerabilities in the @wordpress/widgets package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for freeVulnerability | Vulnerable Version |
---|---|
@wordpress/widgets is a Functionality used by the widgets block editor in the Widgets screen and the Customizer. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) through insufficient output escaping on user-supplied input. An attacker can inject and execute malicious scripts by crafting malicious inputs. How to fix Cross-site Scripting (XSS)? Upgrade | <3.3.1 |