CVE-2022-21802

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-21802

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-21802.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-21802

Aliases

GHSA-589f-c66p-hxr4

Published

2022-07-25T13:45:39Z

Modified

2026-10-24T10:50:44Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P CVSS Calculator

Summary

Cross-site Scripting (XSS)

Details

The package grapesjs before 0.19.5 are vulnerable to Cross-site Scripting (XSS) due to an improper sanitization of the class name in Selector Manager.

Database specific

{
    "cna_assigner":  "snyk",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/21xxx/CVE-2022-21802.json"
}

References

Affected packages

Git / github.com/grapesjs/grapesjs

Affected ranges

Type

GIT

Repo

https://github.com/grapesjs/grapesjs

Events

Introduced

Fixed

5ab7694c0d429debb5e8e2a7d75afdfc7abbd087

Fixed

13e85d152d486b968265c4b8017e8901e7d89ff3

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:grapesjs:grapesjs:*:*:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "0.19.5"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "range":  [
                {
                    "fixed":  "13e85d152d486b968265c4b8017e8901e7d89ff3"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "original_tag":  "v0.19.5",
            "range":  [
                {
                    "fixed":  "5ab7694c0d429debb5e8e2a7d75afdfc7abbd087"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

v0.*

v0.10.2

v0.10.4

v0.10.6

v0.10.7

v0.10.8

v0.12.15

v0.12.17

v0.12.25

v0.12.30

v0.12.37

v0.12.45

v0.12.5

v0.12.50

v0.12.52

v0.12.55

v0.12.58

v0.12.60

v0.12.7

v0.12.8

v0.13.5

v0.13.8

v0.14.10

v0.14.15

v0.14.17

v0.14.20

v0.14.21

v0.14.23

v0.14.25

v0.14.27

v0.14.29

v0.14.33

v0.14.40

v0.14.43

v0.14.48

v0.14.49

v0.14.5

v0.14.50

v0.14.52

v0.14.55

v0.14.57

v0.14.6

v0.14.61

v0.14.62

v0.14.9

v0.15.3

v0.16.12

v0.16.17

v0.16.18

v0.16.2

v0.16.22

v0.16.27

v0.16.3

v0.16.30

v0.16.34

v0.16.41

v0.16.43

v0.16.44

v0.16.45

v0.17.19

v0.17.22

v0.17.25

v0.17.26

v0.17.27

v0.17.28

v0.17.3

v0.17.4

v0.18.1

v0.18.2

v0.18.3

v0.18.4

v0.19.4

v0.3.40

v0.3.50

v0.3.55

v0.3.57

v0.3.67

v0.3.68

v0.3.70

v0.3.71

v0.4.15

v0.4.25

v0.4.30

v0.4.33

v0.4.5

v0.4.8

v0.5.1

v0.5.12

v0.5.15

v0.5.17

v0.5.2

v0.5.20

v0.5.23

v0.5.3

v0.5.30

v0.5.32

v0.5.35

v0.5.37

v0.5.40

v0.5.41

v0.5.7

v0.8.1

v0.8.16

v0.8.17

v0.8.18

v0.8.19

v0.8.8

v0.9.1

v0.9.11

v0.9.12

v0.9.13

v0.9.15

v0.9.2

v0.9.32

v0.9.5

v0.9.6

v0.9.7

v0.9.8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-21802.json"