Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-10-31	CVE-2022-3783	Cross-site Scripting vulnerability in Nodered Node-Red-Dashboard A vulnerability, which was classified as problematic, has been found in node-red-dashboard. network low complexity nodered CWE-79	6.1
2019-10-08	CVE-2019-10756	Cross-site Scripting vulnerability in Nodered Node-Red-Dashboard It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default. network low complexity nodered CWE-79	5.4