← Back

Emoji Button

emoji_button

Vendor: Emoji Button Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-43785
1Emoji Button Project
1Emoji Button
Jun 17, 2026
Nov 26, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
@joeattardi/emoji-button is a Vanilla JavaScript emoji picker component. In affected versions there are two vectors for XSS attacks: a URL for a custom emoji, and an i18n string. In both of these cases, a value can be cr...Show more
@joeattardi/emoji-button is a Vanilla JavaScript emoji picker component. In affected versions there are two vectors for XSS attacks: a URL for a custom emoji, and an i18n string. In both of these cases, a value can be crafted such that it can insert a `script` tag into the page and execute malicious code.Show less