ranks/emojione · Security
Cross-Site Scripting in emojione
- GHSA ID
- GHSA-46m8-42hm-wvvw
- CVE ID
- CVE-2016-1000231
- Severity
- high
- Published
- Updated
Description
Affected versions of emojione are vulnerable to cross-site scripting when user input is passed into the toShort(), shortnameToImage(), unicodeToImage(), and toImage() functions.
Recommendation
Update to version 1.3.1 or later.
CWEs
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')