Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2023-32325

Cross-site scripting in PostHog-js

Description

PostHog-js is a library to interface with the PostHog analytics tool. Versions prior to 1.57.2 have the potential for cross-site scripting. Problem has been patched in 1.57.2. Users are advised to upgrade. Users unable to upgrade should ensure that their Content Security Policy is in place.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PostHog posthog-js

  • < 1.57.2affected

References