Cross-site Scripting (XSS)
CVE-2021-23398

6.1MEDIUM

Key Information:

Vendor: React-bootstrap-table Project
Status: React-bootstrap-table
Vendor: CVE Published:; 24 June 2021

🔔 Create React-bootstrap-table Project Vulnerability Alert

What is CVE-2021-23398?

All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting (XSS) via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output.