marcelodolza/iziModal

marcelodolza/iziModal

GitHubGitHub
GitHubgithub.com
marcelodolza.github.iomarcelodolza.github.io
Releases11
Frequency7 months 23 hours
Last Release
Stars2.15K
Elegant, responsive, flexible and lightweight modal plugin with jQuery.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-32860↗
6.1 MEDIUM—

iziModal is a modal plugin with jQuery. Versions prior to 1.6.1 are vulnerable to cross-site scripting (XSS) when handling untrusted modal titles. An attacker who is able to influence the field `title` when creating a `iziModal` instance is able to supply arbitrary `html` or `javascript` code that will be rendered in the context of a user, potentially leading to `XSS`. Version 1.6.1 contains a patch for this issue