{ "id": "CVE-2024-0758", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2024-01-19T21:15:09.600", "lastModified": "2024-01-19T22:52:48.170", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "MolecularFaces before 0.3.0 is vulnerable to cross site scripting. A remote attacker can execute arbitrary JavaScript in the context of a victim browser via crafted molfiles.\n\n\n" } ], "metrics": {}, "weaknesses": [ { "source": "disclosure@vulncheck.com", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-79" } ] } ], "references": [ { "url": "https://github.com/advisories/GHSA-2pwh-52h7-7j84", "source": "disclosure@vulncheck.com" }, { "url": "https://github.com/ipb-halle/MolecularFaces/security/advisories/GHSA-2pwh-52h7-7j84", "source": "disclosure@vulncheck.com" }, { "url": "https://vulncheck.com/advisories/vc-advisory-GHSA-2pwh-52h7-7j84", "source": "disclosure@vulncheck.com" } ] }