Learn about the XSS vulnerability in hhurz/tableexport.jquery.plugin, enabling cookie transmission to third-party servers and data leakage from secure sessions. Understand the impact, mitigation, prevention, and patching for CVE-2022-1291.
A Cross-Site Scripting (XSS) vulnerability was discovered in the
onCellHtmlData
function of hhurz/tableexport.jquery.plugin prior to version 1.25.0, allowing the transmission of cookies to third-party servers and sending data from secure sessions to external sources.