Description (CNA)
Shout is an IRC client. Because the `/topic` command in messages is unescaped, attackers have the ability to inject HTML scripts that will run in the victim's browser. Affects shout >=0.44.0 <=0.49.3.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HackerOne / shout node module | affected >=0.44.0 <=0.49.3 |
CWE
CWE-80
References
ADP enrichment
No English description supplied.