CVE-2024-33665
angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no doc...
Original description
The description as published by the source.
angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks.
References
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- report github.com
- web docs.herodevs.com
- web stackblitz.com