CVE-2022-21802: Grapesjs

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The package grapesjs before 0.19.5 are vulnerable to Cross-site Scripting (XSS) due to an improper sanitization of the class name in Selector Manager.

Affected products

• Grapesjs Grapesjs: before 0.19.5 (fixed in 0.19.5)

Published 2022-07-25. Last modified 2026-06-17.