← Back to CVE List

CVE-2022-25854

Published: 2022-04-29T20:15Z
Last Modified: 2024-11-21T06:53Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
This affects the package @yaireo/tagify before 4.9.8. The package is used for rendering UI components inside the input or text fields, and an attacker can pass a malicious placeholder value to it to fire the XSS payload. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt