foundation-sites@5.5.3 vulnerabilities
The most advanced responsive front-end framework in the world.
-
latest version
6.8.1
-
latest non vulnerable version
-
first published
9 years ago
-
latest version published
7 months ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the foundation-sites package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
Affected versions of this package are vulnerable to Cross-site Scripting (XSS) attacks due to an insufficient fix to npm:foundation-sites:20150619 Thanks to Nathaniel Paulus for disclosing this vulnerability! Although This vulnerability was introduced in a deliberate attempt to allow HTML in captions. The file was subsequently deleted when version 6 was merged into the develop branch in 1e08494bb2118c9786ffc33c28158311cd542bcb. Confirmation of its removal (as well as plans to re-add it) can be found in issue 7759 How to fix Cross-site Scripting (XSS)? Upgrade |
<6.0.0
|