CVE-2025-27108 | ryansolid dom-expressions up to 0.39.4 replace cross site scripting (GHSA-hw62-58pr-7wc5)

A vulnerability was found in ryansolid dom-expressions up to 0.39.4. It has been declared as problematic. This vulnerability affects the function replace. The manipulation leads to cross site scripting.

This vulnerability was named CVE-2025-27108. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.