@fortawesome/fontawesome

Releases43

Frequency6 days 11 hours

Last Releaseabout 8 years ago

The iconic font, CSS, and SVG framework

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2022-4478NVD↗	< 4.3.2	Jan 16, 2023Monday, 16 January 2023, 16:15	5.4 MEDIUM	—
The Font Awesome WordPress plugin before 4.3.2 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins.