{"id":"GHSA-3jqw-vv45-mjhh","summary":"XSS/Script injection vulnerability in matestack","details":"matestack-ui-core (RubyGem) before 0.7.4 is vulnerable to XSS/Script injection.\n\nThis vulnerability is patched in version 0.7.4.","aliases":["CVE-2020-5241"],"modified":"2026-09-10T03:48:42.859630871Z","published":"2020-02-12T23:37:46Z","database_specific":{"github_reviewed":true,"github_reviewed_at":"2020-02-12T23:37:29Z","nvd_published_at":null,"cwe_ids":["CWE-80"],"severity":"HIGH"},"references":[{"type":"WEB","url":"https://github.com/matestack/matestack-ui-core/security/advisories/GHSA-3jqw-vv45-mjhh"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-5241"},{"type":"WEB","url":"https://github.com/matestack/matestack-ui-core/commit/5c61571739e860db9ca578fe09ab4733878cb0fc"},{"type":"WEB","url":"https://github.com/matestack/matestack-ui-core/commit/e96915cf20c4fa0571df7fa21e9b09a69be19107"},{"type":"PACKAGE","url":"https://github.com/matestack/matestack-ui-core"},{"type":"WEB","url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/matestack-ui-core/CVE-2020-5241.yml"}],"affected":[{"package":{"name":"matestack-ui-core","ecosystem":"RubyGems","purl":"pkg:gem/matestack-ui-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.4"}]}],"versions":["0.6.0","0.7.0","0.7.1","0.7.2","0.7.2.1","0.7.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/02/GHSA-3jqw-vv45-mjhh/GHSA-3jqw-vv45-mjhh.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N"}]}