Approved changes feed: RSS · Atom

cpe:2.3:a:npm:@claviska/jquery-minicolors:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNpm (6ace52b0-9009-5fdd-a728-e44433bebfc4)
Product@Claviska/Jquery Minicolors (c9d9071f-83f2-5648-b8e2-f6656f6b47bd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-32850 vulnerable 2026-06-03 14:44:40.431567 jQuery MiniColors vulnerable to Cross-site Scripting
MEDIUM (6.1)
jQuery MiniColors is a color picker built on jQuery. Prior to version 2.3.6, jQuery MiniColors is prone to cross-site scripting when handling untrusted color names. This issue is patched in version 2.3.6.
Published: 2023-02-20T00:00:00.000Z
Updated: 2025-03-10T21:09:21.659Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.