← Back

Baremetrics

baremetrics

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Date Range Picker
date_range_picker
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-32859
1Baremetrics
1Date Range Picker
Jun 17, 2026
Feb 21, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The Baremetrics date range picker is a solution for selecting both date ranges and single dates from a single calender view. Versions 1.0.14 and prior are prone to cross-site scripting (XSS) when handling untrusted `plac...Show more
The Baremetrics date range picker is a solution for selecting both date ranges and single dates from a single calender view. Versions 1.0.14 and prior are prone to cross-site scripting (XSS) when handling untrusted `placeholder` entries. An attacker who is able to influence the field `placeholder` when creating a `Calendar` instance is able to supply arbitrary `html` or `javascript` that will be rendered in the context of a user leading to XSS. There are no known patches for this issue.Show less