Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-47817

Unvalidated paragraph widget values can be used for Cross-site Scripting in lara-zeus

Description

Lara-zeus Dynamic Dashboard simple way to manage widgets for your website landing page, and filament dashboard and Lara-zeus artemis is a collection of themes for the lara-zeus ecosystem. If values passed to a paragraph widget are not valid and contain a specific set of characters, applications are vulnerable to XSS attack against a user who opens a page on which a paragraph widget is rendered. Users are advised to upgrade to the appropriate fix versions detailed in the advisory metadata. There are no known workarounds for this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

lara-zeus dynamic-dashboard

  • lara-zeus/dynamic-dashboard: >= 3.0.0, < 3.0.2affected
  • lara-zeus/artemis: >= 1.0.0, < 1.0.7affected

References