MolecularFaces before 0.3.0 is vulnerable to cross site scripting. A remote attacker can execute arbitrary JavaScript in the context of a victim browser via crafted molfiles.
{
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "0.3.0"
}
],
"cpe": "cpe:2.3:a:ipb-halle:molecularfaces:*:*:*:*:*:*:*:*"
}