Skip to content

Instantly share code, notes, and snippets.

@walhajri
walhajri / CVE-2021-36713.md
Last active January 7, 2024 10:01
CVE-2021-36713 Publication

Cross-Site Scripting (XSS) Vulnerability

Description:

DataTables is a table enhancing plug-in for the jQuery Javascript library, adding sorting, paging and filtering abilities to plain HTML tables with minimal effort.

This vulnerability was found during a penetration testing assessment and the website used the Datatables library.

Impact

If a website developer exposed the parameter sBaseName from the function _fnCreateCookie of the DataTables library then a malicious user could execute Javascript code through it.